level=info msg="Memory available for map entries (0.003% of 16764964864B): 41912412B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.132462ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="56.123µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.128852ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="5.371µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=95.014293ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="19.311µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="133.865µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="173.117µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="153.726µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="508.009µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.79µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.990677ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=5.979074ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="46.381µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="38.551µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="216.848µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="176.237µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="134.595µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=47.329745ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="61.242µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="15.091µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.3.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.322573ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.7µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.400933ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.57µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.59649ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.69µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.97µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.85µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.67µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="104.704µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="15.67µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="64.223µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="330.212µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.24µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="12.211µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="215.538µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="448.847µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.225916ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.91µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="19.071µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.3 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.3 ipAddr.ipv6="" k8sNodeIP=199.204.45.3 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.3" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.226" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.3" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.3} {CiliumInternalIP 10.0.0.226}] 10.0.0.0/24 [] [] 10.0.0.12 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:34921" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.499147392s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="16.78µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="10.29µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="40.492µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="3.02µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Creating host endpoint" subsys=daemon level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.41538893s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.246 4499aa68-7f6f-45a9-89ca-89a8dbf703b8 default }" containerID=3f1e21d6a91df747151b19f91b0dfa6fc7fbb28bd5eb6fa6f122f9d68eb256bd datapathConfiguration="&{false false false false false }" interface=lxc0db405e51e83 k8sPodName=kube-system/coredns-7c96b6546b-rbktp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f1e21d6a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2038 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rbktp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f1e21d6a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2038 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rbktp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3f1e21d6a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2038 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rbktp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f1e21d6a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2038 identity=48078 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rbktp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f1e21d6a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2038 identity=48078 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rbktp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 1c2a7c42-d18c-4297-9b65-2482d28191ff default }" containerID=e431baf0b788e21ea61da9d5ba0821601f912089345af3648d086359a72e1917 datapathConfiguration="&{false false false false false }" interface=lxcee042db9e94d k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4xh2m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e431baf0b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 ipv4=10.0.0.13 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4xh2m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e431baf0b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=5db4c68d-a026-450c-8cb4-051d2e7ed66d,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=5db4c68d-a026-450c-8cb4-051d2e7ed66d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.13 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4xh2m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Compiled new BPF template" BPFCompilationTime=298.017739ms file-path=/var/run/cilium/state/templates/a2eda0c670968e2407ecc2c9c31f658156a72b718857f7a7e3bbc024649ad7bc/bpf_host.o subsys=datapath-loader level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=5db4c68d-a026-450c-8cb4-051d2e7ed66d;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=5db4c68d-a026-450c-8cb4-051d2e7ed66d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e431baf0b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 identity=58681 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=5db4c68d-a026-450c-8cb4-051d2e7ed66d,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=5db4c68d-a026-450c-8cb4-051d2e7ed66d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.13 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4xh2m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e431baf0b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 identity=58681 ipv4=10.0.0.13 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4xh2m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=152 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 ipv4=10.0.0.12 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identityLabels="reserved:health" ipv4=10.0.0.12 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identity=4 identityLabels="reserved:health" ipv4=10.0.0.12 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.039490693s file-path=/var/run/cilium/state/templates/5e33a1f1ed83e94c8310c088ea8182c6762ed24ad160c0197bfd31ab5cd36913/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=e431baf0b7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1120 identity=58681 ipv4=10.0.0.13 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4xh2m subsys=endpoint level=info msg="Successful endpoint creation" containerID=e431baf0b7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1120 identity=58681 ipv4=10.0.0.13 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4xh2m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1163 identity=4 ipv4=10.0.0.12 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3f1e21d6a9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2038 identity=48078 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rbktp subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f1e21d6a9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2038 identity=48078 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rbktp subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e431baf0b7 endpointID=1120 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-4xh2m subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=5db4c68d-a026-450c-8cb4-051d2e7ed66d k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=5db4c68d-a026-450c-8cb4-051d2e7ed66d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=e431baf0b7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1120 identity=58681 ipv4=10.0.0.13 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4xh2m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 9d5e2500-901c-4965-a56c-90011820d882 default }" containerID=289c340aa6846c39af8f7eeafebef3d7632536c1ae7e4d0cf435d5cbe21d57b4 datapathConfiguration="&{false false false false false }" interface=lxcc33d394c5fb9 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-944mv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=289c340aa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2836 ipv4=10.0.0.46 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-944mv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=289c340aa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2836 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.46 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-944mv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=289c340aa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2836 identity=40713 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.46 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-944mv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=289c340aa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2836 identity=40713 ipv4=10.0.0.46 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-944mv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=289c340aa6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2836 identity=40713 ipv4=10.0.0.46 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-944mv subsys=endpoint level=info msg="Successful endpoint creation" containerID=289c340aa6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2836 identity=40713 ipv4=10.0.0.46 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-944mv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=152 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00152 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00152 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00152 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00152:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=152 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 e2510ba1-80e0-4f2d-9d9d-f86c132390d8 default }" containerID=e1e5e9d527ab68f3c864722515bfce101d80074510e0503d5e1e01d8cdd9a202 datapathConfiguration="&{false false false false false }" interface=lxc5ecd7cdca05c k8sPodName=kube-system/coredns-67659f764b-ndldb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1e5e9d527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 ipv4=10.0.0.96 ipv6= k8sPodName=kube-system/coredns-67659f764b-ndldb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1e5e9d527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.96 ipv6= k8sPodName=kube-system/coredns-67659f764b-ndldb subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e1e5e9d527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 identity=48078 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.96 ipv6= k8sPodName=kube-system/coredns-67659f764b-ndldb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1e5e9d527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 identity=48078 ipv4=10.0.0.96 ipv6= k8sPodName=kube-system/coredns-67659f764b-ndldb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 78b8c09b-3f9b-4b39-b049-6c9ddf295eb1 default }" containerID=57536a5e0ea36dd1e1b542097b800ebb362273af3be4cb6e926bf01ea7850d0e datapathConfiguration="&{false false false false false }" interface=lxcf9bc83020353 k8sPodName=kube-system/coredns-67659f764b-ngnvl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57536a5e0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 ipv4=10.0.0.79 ipv6= k8sPodName=kube-system/coredns-67659f764b-ngnvl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57536a5e0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.79 ipv6= k8sPodName=kube-system/coredns-67659f764b-ngnvl subsys=endpoint level=info msg="Identity of endpoint changed" containerID=57536a5e0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 identity=48078 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.79 ipv6= k8sPodName=kube-system/coredns-67659f764b-ngnvl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57536a5e0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 identity=48078 ipv4=10.0.0.79 ipv6= k8sPodName=kube-system/coredns-67659f764b-ngnvl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e1e5e9d527 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3156 identity=48078 ipv4=10.0.0.96 ipv6= k8sPodName=kube-system/coredns-67659f764b-ndldb subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1e5e9d527 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3156 identity=48078 ipv4=10.0.0.96 ipv6= k8sPodName=kube-system/coredns-67659f764b-ndldb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=57536a5e0e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1727 identity=48078 ipv4=10.0.0.79 ipv6= k8sPodName=kube-system/coredns-67659f764b-ngnvl subsys=endpoint level=info msg="Successful endpoint creation" containerID=57536a5e0e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1727 identity=48078 ipv4=10.0.0.79 ipv6= k8sPodName=kube-system/coredns-67659f764b-ngnvl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.39 6408d875-5628-44b5-8ba2-92dbfdd4a5d8 default }" containerID=eebd498311689031f143f1f1793c715ab5c760ba93c3efbab1a1373f221ee538 datapathConfiguration="&{false false false false false }" interface=lxce45ceeb70900 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vft9m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eebd498311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vft9m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eebd498311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vft9m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eebd498311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 identity=8486 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vft9m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eebd498311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 identity=8486 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vft9m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eebd498311 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1153 identity=8486 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vft9m subsys=endpoint level=info msg="Successful endpoint creation" containerID=eebd498311 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1153 identity=8486 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vft9m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3f1e21d6a9 endpointID=2038 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-rbktp subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=3f1e21d6a9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2038 identity=48078 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rbktp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 3c529571-0a13-43de-a900-532632de030e default }" containerID=025f5ee49ee470f9c0b37ebbdd981f1d20dbffff3a4c813c2492d671ee91b89e datapathConfiguration="&{false false false false false }" interface=lxc7dbc9ab65783 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7l8tb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=025f5ee49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 ipv4=10.0.0.181 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7l8tb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=025f5ee49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.181 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7l8tb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=025f5ee49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identity=11033 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.181 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7l8tb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=025f5ee49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identity=11033 ipv4=10.0.0.181 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7l8tb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.15 a3048806-f2fd-4d51-bf7e-0d20c971791b default }" containerID=cc38934e3e02a691c9dcb65ad49e6595caba4a0bdfb2a1657df10308146e9b59 datapathConfiguration="&{false false false false false }" interface=lxcd7a03d3affa9 k8sPodName=cert-manager/cert-manager-75c4c745bc-mbnp2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc38934e3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3793 ipv4=10.0.0.15 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-mbnp2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc38934e3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3793 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.15 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-mbnp2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.109 c548aa7c-59c4-46cb-a1fc-967cb572672d default }" containerID=d89212ec7cfd0b7219fc39a6cfef75f2085b635ecb9c51008bc521595bc0b883 datapathConfiguration="&{false false false false false }" interface=lxc421c328d6851 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p78sp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d89212ec7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p78sp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d89212ec7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p78sp subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc38934e3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3793 identity=45105 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.15 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-mbnp2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc38934e3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3793 identity=45105 ipv4=10.0.0.15 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-mbnp2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d89212ec7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identity=62484 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p78sp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d89212ec7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identity=62484 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p78sp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc38934e3e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3793 identity=45105 ipv4=10.0.0.15 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-mbnp2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc38934e3e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3793 identity=45105 ipv4=10.0.0.15 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-mbnp2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=025f5ee49e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=573 identity=11033 ipv4=10.0.0.181 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7l8tb subsys=endpoint level=info msg="Successful endpoint creation" containerID=025f5ee49e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=573 identity=11033 ipv4=10.0.0.181 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7l8tb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d89212ec7c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=167 identity=62484 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p78sp subsys=endpoint level=info msg="Successful endpoint creation" containerID=d89212ec7c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=167 identity=62484 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p78sp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.184 62ffca9e-68d5-4600-b917-fced12eba764 default }" containerID=1e7227791b0024dd3d4d0facab5a0896b49883a6082636a8f2b29dfc70843df2 datapathConfiguration="&{false false false false false }" interface=lxcb643dcc66f7e k8sPodName=cert-manager/cert-manager-startupapicheck-lp8s6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e7227791b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 ipv4=10.0.0.184 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lp8s6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e7227791b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=23c6d7e6-b7d9-48d1-a2da-67a81da5da63,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=23c6d7e6-b7d9-48d1-a2da-67a81da5da63,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.184 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lp8s6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=23c6d7e6-b7d9-48d1-a2da-67a81da5da63;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=23c6d7e6-b7d9-48d1-a2da-67a81da5da63;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e7227791b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identity=9900 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=23c6d7e6-b7d9-48d1-a2da-67a81da5da63,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=23c6d7e6-b7d9-48d1-a2da-67a81da5da63,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.184 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lp8s6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e7227791b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identity=9900 ipv4=10.0.0.184 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lp8s6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e7227791b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2742 identity=9900 ipv4=10.0.0.184 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lp8s6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e7227791b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2742 identity=9900 ipv4=10.0.0.184 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lp8s6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1e7227791b endpointID=2742 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-lp8s6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=23c6d7e6-b7d9-48d1-a2da-67a81da5da63 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=23c6d7e6-b7d9-48d1-a2da-67a81da5da63 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=1e7227791b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2742 identity=9900 ipv4=10.0.0.184 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lp8s6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 aba5da91-e749-4b47-a1b3-d2f73f850e4b default }" containerID=1287cc88f53407e85b55f46961403830aea9cb55a2e3b6612994a0eb923c4b78 datapathConfiguration="&{false false false false false }" interface=lxc30d8fa043528 k8sPodName=ingress-nginx/ingress-nginx-admission-create-qn9p2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1287cc88f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 ipv4=10.0.0.193 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qn9p2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1287cc88f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c4446a6b-ef98-4032-8c4d-73b2332ef700,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c4446a6b-ef98-4032-8c4d-73b2332ef700,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.193 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qn9p2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1287cc88f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.193 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qn9p2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=c4446a6b-ef98-4032-8c4d-73b2332ef700;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=c4446a6b-ef98-4032-8c4d-73b2332ef700;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1287cc88f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 identity=45527 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c4446a6b-ef98-4032-8c4d-73b2332ef700,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c4446a6b-ef98-4032-8c4d-73b2332ef700,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.193 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qn9p2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1287cc88f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 identity=45527 ipv4=10.0.0.193 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qn9p2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1287cc88f5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=556 identity=45527 ipv4=10.0.0.193 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qn9p2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1287cc88f5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=556 identity=45527 ipv4=10.0.0.193 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qn9p2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1287cc88f5 endpointID=556 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-qn9p2 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=c4446a6b-ef98-4032-8c4d-73b2332ef700 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=c4446a6b-ef98-4032-8c4d-73b2332ef700 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=1287cc88f5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=556 identity=45527 ipv4=10.0.0.193 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qn9p2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 89a318c5-618b-48f6-8008-93fd81f179cb default }" containerID=55fe5f2123c83eaccd5b505a0070bf33697b371bfb3fb5278e6e4b11c9489bff datapathConfiguration="&{false false false false false }" interface=lxc2007091e18c1 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gvz7d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55fe5f2123 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 ipv4=10.0.0.97 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gvz7d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55fe5f2123 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.97 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gvz7d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55fe5f2123 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 identity=35559 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.97 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gvz7d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55fe5f2123 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 identity=35559 ipv4=10.0.0.97 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gvz7d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=55fe5f2123 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=605 identity=35559 ipv4=10.0.0.97 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gvz7d subsys=endpoint level=info msg="Successful endpoint creation" containerID=55fe5f2123 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=605 identity=35559 ipv4=10.0.0.97 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gvz7d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.253 45290161-ee0a-48bc-b440-ce806ffec23e default }" containerID=ac4e9b1c1ed6ab0a070340d842e4b501fae7b8d7287a8c0fc4bc675a6653b74f datapathConfiguration="&{false false false false false }" interface=lxc41cc0b9b2af4 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nmnvt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac4e9b1c1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2404 ipv4=10.0.0.253 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nmnvt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac4e9b1c1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2404 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ddb6ac09-fe6f-4fe3-9751-531b4b5cc800,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=ddb6ac09-fe6f-4fe3-9751-531b4b5cc800,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.253 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nmnvt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=ddb6ac09-fe6f-4fe3-9751-531b4b5cc800;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=ddb6ac09-fe6f-4fe3-9751-531b4b5cc800;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac4e9b1c1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2404 identity=23657 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ddb6ac09-fe6f-4fe3-9751-531b4b5cc800,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=ddb6ac09-fe6f-4fe3-9751-531b4b5cc800,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.253 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nmnvt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac4e9b1c1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2404 identity=23657 ipv4=10.0.0.253 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nmnvt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ac4e9b1c1e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2404 identity=23657 ipv4=10.0.0.253 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nmnvt subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac4e9b1c1e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2404 identity=23657 ipv4=10.0.0.253 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nmnvt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ac4e9b1c1e endpointID=2404 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-nmnvt subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=ddb6ac09-fe6f-4fe3-9751-531b4b5cc800 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=ddb6ac09-fe6f-4fe3-9751-531b4b5cc800 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=ac4e9b1c1e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2404 identity=23657 ipv4=10.0.0.253 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nmnvt subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=318dfc23-4818-47a0-9b17-144bb3a1a2a5] Description:}]" policyAddRequest=86371cd5-67a3-40c3-a084-9754ee66814d subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=86371cd5-67a3-40c3-a084-9754ee66814d policyRevision=2 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=bbc7ae75-1d2d-43bc-9c6b-2c5478bd54ca] Description:}]" policyAddRequest=e5c352f7-e97f-448c-bbdd-00769dcadcc2 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=e5c352f7-e97f-448c-bbdd-00769dcadcc2 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.66 9abda12b-f9c0-4647-acea-39ed2a449ff6 default }" containerID=f98681a3de7d213bc34aa455cafede9ae598bff1a15cc4b7cad307e00997911b datapathConfiguration="&{false false false false false }" interface=lxc859b6104ed16 k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-vcxv6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f98681a3de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1672 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-vcxv6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f98681a3de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1672 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-vcxv6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.8.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f98681a3de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1672 identity=6609 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-vcxv6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f98681a3de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1672 identity=6609 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-vcxv6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f98681a3de datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1672 identity=6609 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-vcxv6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f98681a3de datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1672 identity=6609 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-vcxv6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.150 6c943945-4abd-4de1-b638-5d09f054e158 default }" containerID=979a59ea1798869e9e64c508d90a34b694b8d75b0ee7e6abe50491774ca1bc61 datapathConfiguration="&{false false false false false }" interface=lxc021a01b9464c k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-2wn7s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=979a59ea17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-2wn7s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=979a59ea17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-2wn7s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.13.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=979a59ea17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identity=2685 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-2wn7s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=979a59ea17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identity=2685 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-2wn7s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=979a59ea17 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=737 identity=2685 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-2wn7s subsys=endpoint level=info msg="Successful endpoint creation" containerID=979a59ea17 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=737 identity=2685 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-2wn7s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.147 b3eb2d14-eda3-4eba-b002-8623e1486e68 default }" containerID=e3fce8269d2a42d063acd819dc10842e7630ab0dc9dbe50841459a37024f7a9d datapathConfiguration="&{false false false false false }" interface=lxc131389e51b08 k8sPodName=openstack/pxc-operator-7cff949c8b-v8n4s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3fce8269d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=619 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-v8n4s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3fce8269d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=619 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-v8n4s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e3fce8269d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=619 identity=39832 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-v8n4s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3fce8269d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=619 identity=39832 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-v8n4s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3fce8269d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=619 identity=39832 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-v8n4s subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3fce8269d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=619 identity=39832 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-v8n4s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.61 cdbd03f4-0780-497d-bf8e-23055f71f1d1 default }" containerID=aa2d6ba6308244a0ccacac7122fb227ec723472d7ae1281b29b708f468d8c8db datapathConfiguration="&{false false false false false }" interface=lxc62370d9919d6 k8sPodName=local-path-storage/helper-pod-create-pvc-b151ec55-7ce2-4b92-806d-39a693b05ce7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa2d6ba630 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=447 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b151ec55-7ce2-4b92-806d-39a693b05ce7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa2d6ba630 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=447 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b151ec55-7ce2-4b92-806d-39a693b05ce7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa2d6ba630 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=447 identity=17269 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b151ec55-7ce2-4b92-806d-39a693b05ce7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa2d6ba630 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=447 identity=17269 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b151ec55-7ce2-4b92-806d-39a693b05ce7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aa2d6ba630 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=447 identity=17269 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b151ec55-7ce2-4b92-806d-39a693b05ce7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa2d6ba630 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=447 identity=17269 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b151ec55-7ce2-4b92-806d-39a693b05ce7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.52 7f9c849a-0832-41f0-8b86-2ef878a7e7bf default }" containerID=f6708b2d9086ee5b2ade8e40d03bd534d4d695650211484cc23db60e1d3ee215 datapathConfiguration="&{false false false false false }" interface=lxcea41e6f5cd76 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6708b2d90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1580 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6708b2d90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1580 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6708b2d90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1580 identity=26632 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6708b2d90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1580 identity=26632 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f6708b2d90 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1580 identity=26632 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6708b2d90 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1580 identity=26632 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aa2d6ba630 endpointID=447 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b151ec55-7ce2-4b92-806d-39a693b05ce7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=aa2d6ba630 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=447 identity=17269 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b151ec55-7ce2-4b92-806d-39a693b05ce7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 3a985d77-60a9-4b52-ab96-d00f778c4822 default }" containerID=08fc4a7a1e9f9da5288b73e5affd765ef47c6f107c39400c3890eb4746c91d40 datapathConfiguration="&{false false false false false }" interface=lxcafaaa369ba97 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08fc4a7a1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2307 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08fc4a7a1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2307 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08fc4a7a1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2307 identity=44199 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08fc4a7a1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2307 identity=44199 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=08fc4a7a1e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2307 identity=44199 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=08fc4a7a1e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2307 identity=44199 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.69 71070b03-0bd0-4355-a7d8-82ce3c0c987b default }" containerID=d4aed3a4d5b79f41f4e14e795ecccae4d33d5ff0dac6b29d75c3f9c881851247 datapathConfiguration="&{false false false false false }" interface=lxc14bd6cf91886 k8sPodName=openstack/memcached-memcached-6479589586-lx4zq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4aed3a4d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-lx4zq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4aed3a4d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-lx4zq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d4aed3a4d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 identity=53368 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-lx4zq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4aed3a4d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 identity=53368 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-lx4zq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4aed3a4d5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=969 identity=53368 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-lx4zq subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4aed3a4d5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=969 identity=53368 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-lx4zq subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=b974e9f1-035b-4df7-bc36-b6e93c8d9d78] Description:}]" policyAddRequest=8fe6f317-c1f7-49a3-be7f-0a720fca924f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=8fe6f317-c1f7-49a3-be7f-0a720fca924f policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.129 2c8c7bb4-d4c3-4a41-9cbe-51c3b006ec64 default }" containerID=ed7375a2022f0e36893d0922461691a4e9472afd89b616ece99a0972915f7105 datapathConfiguration="&{false false false false false }" interface=lxc5f8311bc716d k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed7375a202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 ipv4=10.0.0.129 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed7375a202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.129 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=23.0.7;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-20.0.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed7375a202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 identity=27644 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.129 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed7375a202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 identity=27644 ipv4=10.0.0.129 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed7375a202 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1523 identity=27644 ipv4=10.0.0.129 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed7375a202 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1523 identity=27644 ipv4=10.0.0.129 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036542907656738746 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.32 1ce01cd1-24b8-4f5a-977b-3fcec7f240dc default }" containerID=6d2dacd1637ba5acad874599038c0c838cf43a97a60921cb750d52ebfcd7b95c datapathConfiguration="&{false false false false false }" interface=lxc2ca08cb05624 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2sfxh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d2dacd163 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 ipv4=10.0.0.32 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2sfxh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d2dacd163 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.32 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2sfxh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d2dacd163 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 identity=3737 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.32 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2sfxh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d2dacd163 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 identity=3737 ipv4=10.0.0.32 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2sfxh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6d2dacd163 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=68 identity=3737 ipv4=10.0.0.32 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2sfxh subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d2dacd163 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=68 identity=3737 ipv4=10.0.0.32 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2sfxh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.153 f2e80606-61ff-4ad7-ab1b-234192ebae6a default }" containerID=949b79f59c36894210f57b059c9370d754d8ef163d5a80823978477e5d507b40 datapathConfiguration="&{false false false false false }" interface=lxca16f7efbfb52 k8sPodName=monitoring/kube-prometheus-stack-admission-create-r4dzb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=949b79f59c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2353 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-r4dzb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=949b79f59c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2353 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=fb16cf2c-f91c-40f0-a18e-f5aa5d459057,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=fb16cf2c-f91c-40f0-a18e-f5aa5d459057,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-r4dzb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=fb16cf2c-f91c-40f0-a18e-f5aa5d459057;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=fb16cf2c-f91c-40f0-a18e-f5aa5d459057;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=949b79f59c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2353 identity=20557 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=fb16cf2c-f91c-40f0-a18e-f5aa5d459057,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=fb16cf2c-f91c-40f0-a18e-f5aa5d459057,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-r4dzb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=949b79f59c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2353 identity=20557 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-r4dzb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=949b79f59c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2353 identity=20557 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-r4dzb subsys=endpoint level=info msg="Successful endpoint creation" containerID=949b79f59c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2353 identity=20557 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-r4dzb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=949b79f59c endpointID=2353 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-r4dzb subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=fb16cf2c-f91c-40f0-a18e-f5aa5d459057 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=fb16cf2c-f91c-40f0-a18e-f5aa5d459057 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=949b79f59c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2353 identity=20557 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-r4dzb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 c649457c-ac2b-41a1-a9e2-b0e1c228d233 default }" containerID=a588aa838c58fb550638162f17e475fe14d7a5805bc51dfb3182c8c7ac84c9de datapathConfiguration="&{false false false false false }" interface=lxcec28c41a44fa k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bkqbt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a588aa838c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3660 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bkqbt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a588aa838c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3660 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bkqbt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a588aa838c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3660 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bkqbt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a588aa838c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3660 identity=62667 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bkqbt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a588aa838c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3660 identity=62667 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bkqbt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 1880d778-3e05-4fa1-af3e-83e83461d146 default }" containerID=213512a4a4d7cb362b28e3d6a9de79ac739670ad3b8ddb796bf02c3d34533863 datapathConfiguration="&{false false false false false }" interface=lxc9f0375562fe4 k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-m6j2v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=213512a4a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2920 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-m6j2v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=213512a4a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2920 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-m6j2v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:chart=kube-prometheus-stack-58.2.1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=213512a4a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2920 identity=28916 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-m6j2v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=213512a4a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2920 identity=28916 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-m6j2v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a588aa838c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3660 identity=62667 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bkqbt subsys=endpoint level=info msg="Successful endpoint creation" containerID=a588aa838c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3660 identity=62667 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bkqbt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=213512a4a4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2920 identity=28916 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-m6j2v subsys=endpoint level=info msg="Successful endpoint creation" containerID=213512a4a4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2920 identity=28916 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-m6j2v subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.3 4f4c12bf-8732-4a44-9cf5-e62df943b377 default }" containerID=9f6a8b30f6ae2363a82ec184e5e00b01dacde07cb539565b212a3fa066a54230 datapathConfiguration="&{false false false false false }" interface=lxc558746cac190 k8sPodName=monitoring/kube-prometheus-stack-grafana-bc5c769dd-cqqc2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f6a8b30f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2514 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bc5c769dd-cqqc2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f6a8b30f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2514 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bc5c769dd-cqqc2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f6a8b30f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2514 identity=2197 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bc5c769dd-cqqc2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f6a8b30f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2514 identity=2197 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bc5c769dd-cqqc2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f6a8b30f6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2514 identity=2197 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bc5c769dd-cqqc2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f6a8b30f6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2514 identity=2197 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bc5c769dd-cqqc2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.251 d600cd89-3bfd-456b-b43b-516e15f735a3 default }" containerID=0919785ec049c07766dc2ab7f14d2115a9ee629749e520732e1cc94bb5adf23d datapathConfiguration="&{false false false false false }" interface=lxcacf46036fd9a k8sPodName=monitoring/kube-prometheus-stack-admission-patch-z25nb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0919785ec0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-z25nb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0919785ec0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=d53db878-865a-447b-837b-8a6bf4d394f7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=d53db878-865a-447b-837b-8a6bf4d394f7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-z25nb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=d53db878-865a-447b-837b-8a6bf4d394f7;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=d53db878-865a-447b-837b-8a6bf4d394f7;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0919785ec0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identity=36262 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=d53db878-865a-447b-837b-8a6bf4d394f7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=d53db878-865a-447b-837b-8a6bf4d394f7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-z25nb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0919785ec0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identity=36262 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-z25nb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0919785ec0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=755 identity=36262 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-z25nb subsys=endpoint level=info msg="Successful endpoint creation" containerID=0919785ec0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=755 identity=36262 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-z25nb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0919785ec0 endpointID=755 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-z25nb subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=d53db878-865a-447b-837b-8a6bf4d394f7 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=d53db878-865a-447b-837b-8a6bf4d394f7 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=0919785ec0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=755 identity=36262 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-z25nb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 0fa70f50-6b7f-452a-9013-684cc51e3392 default }" containerID=0464b145d7dd52de7e14311e8726b975861ffba13dd72fdc47a1e5e65f02fd02 datapathConfiguration="&{false false false false false }" interface=lxc4c9ecf80ff24 k8sPodName=local-path-storage/helper-pod-create-pvc-e1db3f5a-77db-42e2-b884-9efd2aa4fbe0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0464b145d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1db3f5a-77db-42e2-b884-9efd2aa4fbe0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0464b145d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1db3f5a-77db-42e2-b884-9efd2aa4fbe0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0464b145d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 identity=17269 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1db3f5a-77db-42e2-b884-9efd2aa4fbe0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0464b145d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 identity=17269 ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1db3f5a-77db-42e2-b884-9efd2aa4fbe0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0464b145d7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1330 identity=17269 ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1db3f5a-77db-42e2-b884-9efd2aa4fbe0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0464b145d7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1330 identity=17269 ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1db3f5a-77db-42e2-b884-9efd2aa4fbe0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.90 b5f2d7e5-09a4-4255-8a95-21549eaca0b1 default }" containerID=1fcd491446393dbfc647b1ecc2f0611016eb2566f6f4c0abd6cbed694b9da5fc datapathConfiguration="&{false false false false false }" interface=lxcd1d8db141645 k8sPodName=local-path-storage/helper-pod-create-pvc-c9374098-aed9-44ae-8f8f-dd0e78fd2374 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1fcd491446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4087 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9374098-aed9-44ae-8f8f-dd0e78fd2374 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1fcd491446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4087 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9374098-aed9-44ae-8f8f-dd0e78fd2374 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1fcd491446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4087 identity=17269 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9374098-aed9-44ae-8f8f-dd0e78fd2374 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1fcd491446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4087 identity=17269 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9374098-aed9-44ae-8f8f-dd0e78fd2374 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1fcd491446 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4087 identity=17269 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9374098-aed9-44ae-8f8f-dd0e78fd2374 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1fcd491446 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4087 identity=17269 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9374098-aed9-44ae-8f8f-dd0e78fd2374 subsys=daemon level=info msg="Delete endpoint request" containerID=1fcd491446 endpointID=4087 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c9374098-aed9-44ae-8f8f-dd0e78fd2374 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=0464b145d7 endpointID=1330 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e1db3f5a-77db-42e2-b884-9efd2aa4fbe0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1fcd491446 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4087 identity=17269 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9374098-aed9-44ae-8f8f-dd0e78fd2374 subsys=endpoint level=info msg="Removed endpoint" containerID=0464b145d7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1330 identity=17269 ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1db3f5a-77db-42e2-b884-9efd2aa4fbe0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 9227a23c-8178-406c-a0b5-35c8344a9c82 default }" containerID=58b9cc05ba221f4447a61e7527357ac779013dfb3782b43a48be30f0cded7d94 datapathConfiguration="&{false false false false false }" interface=lxc08601bb8ac34 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58b9cc05ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58b9cc05ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=58b9cc05ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=58b9cc05ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 identity=2317 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=58b9cc05ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 identity=2317 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=58b9cc05ba datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1205 identity=2317 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=58b9cc05ba datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1205 identity=2317 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.222 e736886f-1e6e-4615-80dc-937cc24ce751 default }" containerID=d360f03878b2cd44369372c70590253046fb7efef95e71bf44de8bd4d820ec24 datapathConfiguration="&{false false false false false }" interface=lxcbf3517828c77 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="New endpoint" containerID=d360f03878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d360f03878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d360f03878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identity=58461 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d360f03878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identity=58461 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d360f03878 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=414 identity=58461 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d360f03878 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=414 identity=58461 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.98 a12bd535-049b-4504-b864-bff28a65434a default }" containerID=2a5d1063ec956e8653b67ab9867770cf43b6c55fbd61596d2787ada7698bbbbd datapathConfiguration="&{false false false false false }" interface=lxc9e7adeedbcc8 k8sPodName=local-path-storage/helper-pod-create-pvc-7d92e83d-8641-4583-bcbf-6ee96b78315f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a5d1063ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d92e83d-8641-4583-bcbf-6ee96b78315f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a5d1063ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d92e83d-8641-4583-bcbf-6ee96b78315f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a5d1063ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identity=17269 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d92e83d-8641-4583-bcbf-6ee96b78315f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a5d1063ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identity=17269 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d92e83d-8641-4583-bcbf-6ee96b78315f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a5d1063ec datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1922 identity=17269 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d92e83d-8641-4583-bcbf-6ee96b78315f subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a5d1063ec datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1922 identity=17269 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d92e83d-8641-4583-bcbf-6ee96b78315f subsys=daemon level=info msg="Delete endpoint request" containerID=2a5d1063ec endpointID=1922 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7d92e83d-8641-4583-bcbf-6ee96b78315f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2a5d1063ec datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1922 identity=17269 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d92e83d-8641-4583-bcbf-6ee96b78315f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 4201ac23-402d-4814-9bb4-280b251f1603 default }" containerID=e028f9f4ee2ee2d6993fb168f7388918ba7ff97210646901891fcf659be0220f datapathConfiguration="&{false false false false false }" interface=lxcdf0be86b1e08 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e028f9f4ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1829 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e028f9f4ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1829 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e028f9f4ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1829 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e028f9f4ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1829 identity=3584 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e028f9f4ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1829 identity=3584 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e028f9f4ee datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1829 identity=3584 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e028f9f4ee datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1829 identity=3584 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.166 b6e7679a-7afb-4804-b15f-1267d5a267c8 default }" containerID=59aea8ef3353a6facc44efc1d0704231908d2088142d5a12ac1523efbb6fe065 datapathConfiguration="&{false false false false false }" interface=lxcc55a3198a23b k8sPodName=openstack/keystone-api-6d7c465bc9-kjnlm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59aea8ef33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-api-6d7c465bc9-kjnlm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59aea8ef33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-api-6d7c465bc9-kjnlm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59aea8ef33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 identity=27352 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-api-6d7c465bc9-kjnlm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59aea8ef33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=950 identity=27352 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-api-6d7c465bc9-kjnlm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.200 378cada5-1f6c-4b86-b15b-de7770182f05 default }" containerID=50cb496e867a3be7432865f827131fc3ca97cc86ea12e0be31faedc61478835b datapathConfiguration="&{false false false false false }" interface=lxc78f09d9f5076 k8sPodName=openstack/keystone-credential-setup-xg5qq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50cb496e86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-credential-setup-xg5qq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50cb496e86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=34c87be6-3676-48be-a00a-f85ff82f3d81,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=34c87be6-3676-48be-a00a-f85ff82f3d81,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-credential-setup-xg5qq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=34c87be6-3676-48be-a00a-f85ff82f3d81;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=34c87be6-3676-48be-a00a-f85ff82f3d81;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50cb496e86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=42059 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=34c87be6-3676-48be-a00a-f85ff82f3d81,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=34c87be6-3676-48be-a00a-f85ff82f3d81,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-credential-setup-xg5qq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50cb496e86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=42059 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-credential-setup-xg5qq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59aea8ef33 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=950 identity=27352 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-api-6d7c465bc9-kjnlm subsys=endpoint level=info msg="Successful endpoint creation" containerID=59aea8ef33 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=950 identity=27352 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-api-6d7c465bc9-kjnlm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=50cb496e86 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=776 identity=42059 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-credential-setup-xg5qq subsys=endpoint level=info msg="Successful endpoint creation" containerID=50cb496e86 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=776 identity=42059 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-credential-setup-xg5qq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=50cb496e86 endpointID=776 k8sNamespace=openstack k8sPodName=keystone-credential-setup-xg5qq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=34c87be6-3676-48be-a00a-f85ff82f3d81 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=34c87be6-3676-48be-a00a-f85ff82f3d81 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=50cb496e86 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=776 identity=42059 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-credential-setup-xg5qq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 9a1fd870-79c1-44ac-8305-d2c36261f38b default }" containerID=8692fa91eba5985935131b155cc3147d3834dad547bd564ff1a531bfeb2d014b datapathConfiguration="&{false false false false false }" interface=lxc1a66219b7ecb k8sPodName=openstack/keystone-db-init-7jhlc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8692fa91eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-7jhlc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8692fa91eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7d50aea8-e88e-4891-8735-c11d91fe5fe3,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=7d50aea8-e88e-4891-8735-c11d91fe5fe3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-7jhlc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8692fa91eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-7jhlc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7d50aea8-e88e-4891-8735-c11d91fe5fe3;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=7d50aea8-e88e-4891-8735-c11d91fe5fe3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8692fa91eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=49219 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7d50aea8-e88e-4891-8735-c11d91fe5fe3,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=7d50aea8-e88e-4891-8735-c11d91fe5fe3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-7jhlc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8692fa91eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=49219 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-7jhlc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8692fa91eb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=608 identity=49219 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-7jhlc subsys=endpoint level=info msg="Successful endpoint creation" containerID=8692fa91eb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=608 identity=49219 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-7jhlc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8692fa91eb endpointID=608 k8sNamespace=openstack k8sPodName=keystone-db-init-7jhlc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7d50aea8-e88e-4891-8735-c11d91fe5fe3 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=7d50aea8-e88e-4891-8735-c11d91fe5fe3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8692fa91eb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=608 identity=49219 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-7jhlc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 e05d923c-e6e0-45ef-bf78-f5455b4b9f60 default }" containerID=ef665682709bb07c1279490c92add9caaffd6b56214e03482b6b20331fdfaa92 datapathConfiguration="&{false false false false false }" interface=lxc1c6d43aa86aa k8sPodName=openstack/keystone-fernet-setup-vwl8j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef66568270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-fernet-setup-vwl8j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef66568270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=69908e80-1989-4c4b-9fbd-186f88d44d0b,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=69908e80-1989-4c4b-9fbd-186f88d44d0b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-fernet-setup-vwl8j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ef66568270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-fernet-setup-vwl8j line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=69908e80-1989-4c4b-9fbd-186f88d44d0b;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=69908e80-1989-4c4b-9fbd-186f88d44d0b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef66568270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 identity=20265 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=69908e80-1989-4c4b-9fbd-186f88d44d0b,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=69908e80-1989-4c4b-9fbd-186f88d44d0b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-fernet-setup-vwl8j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef66568270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 identity=20265 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-fernet-setup-vwl8j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ef66568270 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=640 identity=20265 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-fernet-setup-vwl8j subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef66568270 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=640 identity=20265 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-fernet-setup-vwl8j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ef66568270 endpointID=640 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-vwl8j subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=69908e80-1989-4c4b-9fbd-186f88d44d0b k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=69908e80-1989-4c4b-9fbd-186f88d44d0b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ef66568270 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=640 identity=20265 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-fernet-setup-vwl8j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 f2a45694-4296-4a19-9f98-c55daf3b2a2b default }" containerID=fe9945b0bb8e1273cd2c111f8dfb4f98e0557219dde30d56ff8f626088f55606 datapathConfiguration="&{false false false false false }" interface=lxc2f058b5caea5 k8sPodName=openstack/keystone-db-sync-gr7mc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe9945b0bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=882 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-db-sync-gr7mc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe9945b0bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=882 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=033cf715-cfd4-4d10-a61b-f9c69a67ce61,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=033cf715-cfd4-4d10-a61b-f9c69a67ce61,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-db-sync-gr7mc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=033cf715-cfd4-4d10-a61b-f9c69a67ce61;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=033cf715-cfd4-4d10-a61b-f9c69a67ce61;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe9945b0bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=882 identity=8054 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=033cf715-cfd4-4d10-a61b-f9c69a67ce61,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=033cf715-cfd4-4d10-a61b-f9c69a67ce61,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-db-sync-gr7mc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe9945b0bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=882 identity=8054 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-db-sync-gr7mc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fe9945b0bb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=882 identity=8054 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-db-sync-gr7mc subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe9945b0bb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=882 identity=8054 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-db-sync-gr7mc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fe9945b0bb endpointID=882 k8sNamespace=openstack k8sPodName=keystone-db-sync-gr7mc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=033cf715-cfd4-4d10-a61b-f9c69a67ce61 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=033cf715-cfd4-4d10-a61b-f9c69a67ce61 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fe9945b0bb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=882 identity=8054 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-db-sync-gr7mc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 44278a7a-26e3-4768-af40-eea4119ed04f default }" containerID=9d40c1d86d4a28c92b5cfa1400e6374d707fe7c5f2c5967258bde39526d7b95b datapathConfiguration="&{false false false false false }" interface=lxcbc2e6dc83306 k8sPodName=openstack/keystone-rabbit-init-w7x5f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d40c1d86d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3063 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-w7x5f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d40c1d86d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3063 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=07e6faec-5d4d-40e1-bd8f-f4156a498832,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=07e6faec-5d4d-40e1-bd8f-f4156a498832,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-w7x5f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=07e6faec-5d4d-40e1-bd8f-f4156a498832;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=07e6faec-5d4d-40e1-bd8f-f4156a498832;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d40c1d86d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3063 identity=8975 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=07e6faec-5d4d-40e1-bd8f-f4156a498832,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=07e6faec-5d4d-40e1-bd8f-f4156a498832,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-w7x5f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d40c1d86d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3063 identity=8975 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-w7x5f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9d40c1d86d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3063 identity=8975 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-w7x5f subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d40c1d86d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3063 identity=8975 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-w7x5f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9d40c1d86d endpointID=3063 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-w7x5f subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=07e6faec-5d4d-40e1-bd8f-f4156a498832 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=07e6faec-5d4d-40e1-bd8f-f4156a498832 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9d40c1d86d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3063 identity=8975 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-w7x5f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 d153d6fc-1d34-4882-8962-ab877611f6d1 default }" containerID=2031086c970e4774324faa13b771fcd4cdfb90d67c5f25fc1bc28ddc1bfe02d2 datapathConfiguration="&{false false false false false }" interface=lxc4413d7a3e2c5 k8sPodName=openstack/keystone-domain-manage-lvv9m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2031086c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-lvv9m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2031086c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dbc429c8-9854-415e-8f04-42ee558f3098,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=dbc429c8-9854-415e-8f04-42ee558f3098,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-lvv9m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2031086c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-lvv9m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=dbc429c8-9854-415e-8f04-42ee558f3098;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=dbc429c8-9854-415e-8f04-42ee558f3098;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2031086c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 identity=52093 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dbc429c8-9854-415e-8f04-42ee558f3098,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=dbc429c8-9854-415e-8f04-42ee558f3098,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-lvv9m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2031086c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 identity=52093 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-lvv9m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2031086c97 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3401 identity=52093 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-lvv9m subsys=endpoint level=info msg="Successful endpoint creation" containerID=2031086c97 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3401 identity=52093 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-lvv9m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2031086c97 endpointID=3401 k8sNamespace=openstack k8sPodName=keystone-domain-manage-lvv9m subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=dbc429c8-9854-415e-8f04-42ee558f3098 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=dbc429c8-9854-415e-8f04-42ee558f3098 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2031086c97 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3401 identity=52093 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-lvv9m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 d8081cb2-c288-47f7-919b-9c328401a561 default }" containerID=28e4734273c22be0fd16d84e126f40cba0e965e5cc0f4f4623d91856443402f4 datapathConfiguration="&{false false false false false }" interface=lxcdbe1abae40e1 k8sPodName=openstack/keystone-bootstrap-r89w6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28e4734273 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=809 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-bootstrap-r89w6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28e4734273 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=809 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=93b4a08e-fcb9-41b1-a9b7-160e8c28b8b1,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=93b4a08e-fcb9-41b1-a9b7-160e8c28b8b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-bootstrap-r89w6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=93b4a08e-fcb9-41b1-a9b7-160e8c28b8b1;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=93b4a08e-fcb9-41b1-a9b7-160e8c28b8b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28e4734273 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=809 identity=24382 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=93b4a08e-fcb9-41b1-a9b7-160e8c28b8b1,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=93b4a08e-fcb9-41b1-a9b7-160e8c28b8b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-bootstrap-r89w6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28e4734273 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=809 identity=24382 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-bootstrap-r89w6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28e4734273 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=809 identity=24382 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-bootstrap-r89w6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=28e4734273 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=809 identity=24382 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-bootstrap-r89w6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=28e4734273 endpointID=809 k8sNamespace=openstack k8sPodName=keystone-bootstrap-r89w6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=93b4a08e-fcb9-41b1-a9b7-160e8c28b8b1 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=93b4a08e-fcb9-41b1-a9b7-160e8c28b8b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=28e4734273 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=809 identity=24382 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-bootstrap-r89w6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 06e7d2f8-3b2b-494d-a48d-8bcc63c54629 default }" containerID=c49eea019e965ab4a44b2ae9bb616a7ec3231e9178cda1a620759c74f83661e0 datapathConfiguration="&{false false false false false }" interface=lxcdc940fe62792 k8sPodName=openstack/horizon-7c47d87788-gh4rc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c49eea019e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/horizon-7c47d87788-gh4rc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c49eea019e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/horizon-7c47d87788-gh4rc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c49eea019e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identity=723 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/horizon-7c47d87788-gh4rc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c49eea019e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identity=723 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/horizon-7c47d87788-gh4rc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c49eea019e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=133 identity=723 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/horizon-7c47d87788-gh4rc subsys=endpoint level=info msg="Successful endpoint creation" containerID=c49eea019e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=133 identity=723 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/horizon-7c47d87788-gh4rc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.76 7e28deba-acb6-449a-94fa-71725d1051de default }" containerID=16f40aa1e45a78bd92377bfbe4843749313586c09cb578bf7bb7c5e87b0b9cea datapathConfiguration="&{false false false false false }" interface=lxc6a17b8b45a4c k8sPodName=openstack/horizon-7c47d87788-s2w89 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16f40aa1e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/horizon-7c47d87788-s2w89 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16f40aa1e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/horizon-7c47d87788-s2w89 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=16f40aa1e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 identity=723 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/horizon-7c47d87788-s2w89 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16f40aa1e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 identity=723 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/horizon-7c47d87788-s2w89 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 69668d6b-b60d-4bdb-9149-268d8908c845 default }" containerID=2b602f3a5766000efc152a606bb3aa263a84848c90a9f5f66046bae1dd0e833d datapathConfiguration="&{false false false false false }" interface=lxc2150169ceea0 k8sPodName=openstack/horizon-db-init-22pbj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b602f3a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/horizon-db-init-22pbj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b602f3a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=875d7567-8b64-4bcd-aad2-bb27acdef8e6,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=875d7567-8b64-4bcd-aad2-bb27acdef8e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/horizon-db-init-22pbj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=875d7567-8b64-4bcd-aad2-bb27acdef8e6;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=875d7567-8b64-4bcd-aad2-bb27acdef8e6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b602f3a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=33551 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=875d7567-8b64-4bcd-aad2-bb27acdef8e6,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=875d7567-8b64-4bcd-aad2-bb27acdef8e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/horizon-db-init-22pbj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b602f3a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=33551 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/horizon-db-init-22pbj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 43bff5bf-fa96-4bc5-9133-e0871c262c75 default }" containerID=ef9a3cdad9b2992ed2b731aedba71bc835b6153a6c5ba86d0b905856cdfdb2f9 datapathConfiguration="&{false false false false false }" interface=lxcf8351497d205 k8sPodName=openstack/horizon-7c47d87788-tskf4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef9a3cdad9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/horizon-7c47d87788-tskf4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef9a3cdad9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/horizon-7c47d87788-tskf4 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ef9a3cdad9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 identity=723 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/horizon-7c47d87788-tskf4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef9a3cdad9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 identity=723 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/horizon-7c47d87788-tskf4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=16f40aa1e4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1760 identity=723 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/horizon-7c47d87788-s2w89 subsys=endpoint level=info msg="Successful endpoint creation" containerID=16f40aa1e4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1760 identity=723 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/horizon-7c47d87788-s2w89 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ef9a3cdad9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2232 identity=723 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/horizon-7c47d87788-tskf4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef9a3cdad9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2232 identity=723 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/horizon-7c47d87788-tskf4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2b602f3a57 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=151 identity=33551 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/horizon-db-init-22pbj subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b602f3a57 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=151 identity=33551 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/horizon-db-init-22pbj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2b602f3a57 endpointID=151 k8sNamespace=openstack k8sPodName=horizon-db-init-22pbj subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=875d7567-8b64-4bcd-aad2-bb27acdef8e6 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=875d7567-8b64-4bcd-aad2-bb27acdef8e6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=2b602f3a57 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=151 identity=33551 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/horizon-db-init-22pbj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 34a072e6-a84e-4d06-9565-549755f8968d default }" containerID=6cfdc1ef03a766ac232edb481e626e899bed97693ec5705edbce26927ffe4549 datapathConfiguration="&{false false false false false }" interface=lxcda2411be525e k8sPodName=openstack/horizon-db-sync-v9n5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6cfdc1ef03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/horizon-db-sync-v9n5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6cfdc1ef03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=de5d92f2-1bc1-4666-b435-a0872decb585,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=de5d92f2-1bc1-4666-b435-a0872decb585,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/horizon-db-sync-v9n5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=de5d92f2-1bc1-4666-b435-a0872decb585;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=de5d92f2-1bc1-4666-b435-a0872decb585;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6cfdc1ef03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identity=23544 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=de5d92f2-1bc1-4666-b435-a0872decb585,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=de5d92f2-1bc1-4666-b435-a0872decb585,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/horizon-db-sync-v9n5t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6cfdc1ef03 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=120 identity=23544 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/horizon-db-sync-v9n5t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6cfdc1ef03 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=120 identity=23544 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/horizon-db-sync-v9n5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=6cfdc1ef03 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=120 identity=23544 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/horizon-db-sync-v9n5t subsys=daemon level=info msg="Delete endpoint request" containerID=6cfdc1ef03 endpointID=120 k8sNamespace=openstack k8sPodName=horizon-db-sync-v9n5t subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=de5d92f2-1bc1-4666-b435-a0872decb585 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=de5d92f2-1bc1-4666-b435-a0872decb585 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=6cfdc1ef03 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=120 identity=23544 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/horizon-db-sync-v9n5t subsys=endpoint