level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.741664ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="257.066µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=2.201035ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="18.48µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=110.244351ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.9µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="24.12µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="67.691µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="69.221µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="73.001µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="394.379µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.95µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.071736ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.020784ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="27.57µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="27.47µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="158.324µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="68.342µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="47.421µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=54.576916ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="88.002µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.78µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.51µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.200.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.762458ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="6.05µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.188519ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="9.5µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.950758ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="6.31µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="5.92µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.67µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.64µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.46µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="46.092µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="15.291µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="99.572µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="429.09µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="106.202µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.761µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="295.648µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="741.178µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.277792ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="6.5µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="33.691µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.200 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.200 ipAddr.ipv6="" k8sNodeIP=162.253.55.200 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.200" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.106" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.200" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.200} {CiliumInternalIP 10.0.0.106}] 10.0.0.0/24 [] [] 10.0.0.240 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:36699" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.438616407s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="20.831µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="8.08µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="56.391µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="18.041µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.425762412s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=305.781378ms file-path=/var/run/cilium/state/templates/7766dfde764dc2a7fee826a82d1fcfe761934312ef8f0f991ac3498daea4d557/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.148 8244fb8e-a7e8-4021-a071-5ec7db7d3881 default }" containerID=08cdd4204eb0b12f6c9a891652274be5ece1f095252d48e22ac28c1bfee54c5e datapathConfiguration="&{false false false false false }" interface=lxcbcda08f1ea7a k8sPodName=kube-system/coredns-7c96b6546b-qxvqv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08cdd4204e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 ipv4=10.0.0.148 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qxvqv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08cdd4204e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.148 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qxvqv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=08cdd4204e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.148 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qxvqv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=08cdd4204e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 identity=42268 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.148 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qxvqv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08cdd4204e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 identity=42268 ipv4=10.0.0.148 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qxvqv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 3478e842-221a-41e9-a7ca-fe8b571c0e0e default }" containerID=80aef78b75434b121f13601886ab289144dcdb9dbc753f8a97596b01c94e4bf0 datapathConfiguration="&{false false false false false }" interface=lxc27c4854d1aa9 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vzqtw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80aef78b75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 ipv4=10.0.0.22 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vzqtw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80aef78b75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=f22e56d0-5e2a-4888-817a-c32e53546039,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=f22e56d0-5e2a-4888-817a-c32e53546039,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.22 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vzqtw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=f22e56d0-5e2a-4888-817a-c32e53546039;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=f22e56d0-5e2a-4888-817a-c32e53546039;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80aef78b75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identity=53138 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=f22e56d0-5e2a-4888-817a-c32e53546039,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=f22e56d0-5e2a-4888-817a-c32e53546039,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.22 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vzqtw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80aef78b75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identity=53138 ipv4=10.0.0.22 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vzqtw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1405 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2697 ipv4=10.0.0.240 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2697 identityLabels="reserved:health" ipv4=10.0.0.240 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2697 identity=4 identityLabels="reserved:health" ipv4=10.0.0.240 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.078215573s file-path=/var/run/cilium/state/templates/30719866e87cf2bb16e484ef4810be537aabbf7a6eac27abd87393879cd6b452/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=80aef78b75 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1217 identity=53138 ipv4=10.0.0.22 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vzqtw subsys=endpoint level=info msg="Successful endpoint creation" containerID=80aef78b75 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1217 identity=53138 ipv4=10.0.0.22 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vzqtw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=08cdd4204e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=687 identity=42268 ipv4=10.0.0.148 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qxvqv subsys=endpoint level=info msg="Successful endpoint creation" containerID=08cdd4204e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=687 identity=42268 ipv4=10.0.0.148 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qxvqv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2697 identity=4 ipv4=10.0.0.240 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=80aef78b75 endpointID=1217 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-vzqtw subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=f22e56d0-5e2a-4888-817a-c32e53546039 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=f22e56d0-5e2a-4888-817a-c32e53546039 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=80aef78b75 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1217 identity=53138 ipv4=10.0.0.22 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-vzqtw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 53b974c4-051b-418d-a937-86d0038147ab default }" containerID=ec650d5f0f4405852422d6e43ebb14b17701759523150de573a9f4bf0c1e9ed4 datapathConfiguration="&{false false false false false }" interface=lxc432accfb8824 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jkcc5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec650d5f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4057 ipv4=10.0.0.13 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jkcc5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec650d5f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4057 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.13 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jkcc5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec650d5f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4057 identity=20324 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.13 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jkcc5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ec650d5f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4057 identity=20324 ipv4=10.0.0.13 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jkcc5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec650d5f0f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4057 identity=20324 ipv4=10.0.0.13 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jkcc5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec650d5f0f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4057 identity=20324 ipv4=10.0.0.13 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jkcc5 subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1405 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01405 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01405 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01405 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01405:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1405 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 773eb0fd-556f-4a86-bc37-ecc193431855 default }" containerID=d20f23c0ceff3f46d6307839faf2767ce63b86065b6454b4370dda63f05e324f datapathConfiguration="&{false false false false false }" interface=lxc18bf024f035a k8sPodName=kube-system/coredns-67659f764b-nntbk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d20f23c0ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 ipv4=10.0.0.157 ipv6= k8sPodName=kube-system/coredns-67659f764b-nntbk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d20f23c0ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.157 ipv6= k8sPodName=kube-system/coredns-67659f764b-nntbk subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d20f23c0ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identity=42268 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.157 ipv6= k8sPodName=kube-system/coredns-67659f764b-nntbk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d20f23c0ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identity=42268 ipv4=10.0.0.157 ipv6= k8sPodName=kube-system/coredns-67659f764b-nntbk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 52b458c2-8335-45c5-82df-ae8beaeb4e19 default }" containerID=35c2bb2c76c498b87adaec5f7e35f5be0ca3038434b6188aa4f01d72debbd840 datapathConfiguration="&{false false false false false }" interface=lxc1f0a46c82b40 k8sPodName=kube-system/coredns-67659f764b-zh694 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35c2bb2c76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 ipv4=10.0.0.216 ipv6= k8sPodName=kube-system/coredns-67659f764b-zh694 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35c2bb2c76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.216 ipv6= k8sPodName=kube-system/coredns-67659f764b-zh694 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=35c2bb2c76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 identity=42268 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.216 ipv6= k8sPodName=kube-system/coredns-67659f764b-zh694 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35c2bb2c76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 identity=42268 ipv4=10.0.0.216 ipv6= k8sPodName=kube-system/coredns-67659f764b-zh694 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d20f23c0ce datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=246 identity=42268 ipv4=10.0.0.157 ipv6= k8sPodName=kube-system/coredns-67659f764b-nntbk subsys=endpoint level=info msg="Successful endpoint creation" containerID=d20f23c0ce datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=246 identity=42268 ipv4=10.0.0.157 ipv6= k8sPodName=kube-system/coredns-67659f764b-nntbk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=35c2bb2c76 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=901 identity=42268 ipv4=10.0.0.216 ipv6= k8sPodName=kube-system/coredns-67659f764b-zh694 subsys=endpoint level=info msg="Successful endpoint creation" containerID=35c2bb2c76 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=901 identity=42268 ipv4=10.0.0.216 ipv6= k8sPodName=kube-system/coredns-67659f764b-zh694 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.219 e07c9da7-455c-47d4-9545-5eda83b8b138 default }" containerID=669238e772423793c0d624041229ba3c5b906c1426c511bfc422c9af452219bc datapathConfiguration="&{false false false false false }" interface=lxc311d6e2ef141 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lshsh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=669238e772 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lshsh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=669238e772 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lshsh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=669238e772 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 identity=17837 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lshsh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=669238e772 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 identity=17837 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lshsh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=669238e772 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=938 identity=17837 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lshsh subsys=endpoint level=info msg="Successful endpoint creation" containerID=669238e772 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=938 identity=17837 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lshsh subsys=daemon level=info msg="Delete endpoint request" containerID=08cdd4204e endpointID=687 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-qxvqv subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=08cdd4204e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=687 identity=42268 ipv4=10.0.0.148 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qxvqv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 a5739be0-78d1-4395-86a0-e9f60dec4edf default }" containerID=cb92f7d3ded62adefe1ac162aab93af4798e9663a0dde61cac23d6b2a9560b58 datapathConfiguration="&{false false false false false }" interface=lxc1983c95b33d1 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vl777 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.143 32673ce0-4596-433a-b804-efa797fa9fa7 default }" containerID=5f49cc966054fda2bba2655c24103508a22191f82a6ccc6cc76133a69698a153 datapathConfiguration="&{false false false false false }" interface=lxc73b3d80c2fcc k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6vc2x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb92f7d3de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 ipv4=10.0.0.181 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vl777 subsys=endpoint level=info msg="New endpoint" containerID=5f49cc9660 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3038 ipv4=10.0.0.143 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6vc2x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb92f7d3de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.181 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vl777 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f49cc9660 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3038 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.143 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6vc2x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.150 e9e7201b-c5d1-4cf2-a30c-9d680e8e14fb default }" containerID=5200425f1ccd20e57a54b638c191f88dfa84f5bc0a967d4f4981bb6feabbfad6 datapathConfiguration="&{false false false false false }" interface=lxce7ab5bc6a103 k8sPodName=cert-manager/cert-manager-75c4c745bc-tcp7d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5200425f1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3612 ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tcp7d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5200425f1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3612 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tcp7d subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5f49cc9660 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3038 identity=11637 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.143 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6vc2x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f49cc9660 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3038 identity=11637 ipv4=10.0.0.143 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6vc2x subsys=endpoint level=info msg="Invalid state transition skipped" containerID=5200425f1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3612 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tcp7d line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=cb92f7d3de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.181 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vl777 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb92f7d3de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identity=32288 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.181 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vl777 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb92f7d3de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identity=32288 ipv4=10.0.0.181 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vl777 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5200425f1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3612 identity=41852 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tcp7d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5200425f1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3612 identity=41852 ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tcp7d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb92f7d3de datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1075 identity=32288 ipv4=10.0.0.181 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vl777 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb92f7d3de datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1075 identity=32288 ipv4=10.0.0.181 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vl777 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5f49cc9660 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3038 identity=11637 ipv4=10.0.0.143 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6vc2x subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f49cc9660 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3038 identity=11637 ipv4=10.0.0.143 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6vc2x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5200425f1c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3612 identity=41852 ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tcp7d subsys=endpoint level=info msg="Successful endpoint creation" containerID=5200425f1c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3612 identity=41852 ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tcp7d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.189 1b4f4dd6-099f-40a6-b942-9a6a5fc9ff19 default }" containerID=faf7eb3d274d03e594a1f82912b51f0abbec75cd99b6b58f42d9e7e3606cf584 datapathConfiguration="&{false false false false false }" interface=lxcbfcb179ad9d4 k8sPodName=cert-manager/cert-manager-startupapicheck-9rrg2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=faf7eb3d27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1171 ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9rrg2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=faf7eb3d27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1171 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f3570633-cf6d-4d1c-99ce-3b5b00eff8b1,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f3570633-cf6d-4d1c-99ce-3b5b00eff8b1,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9rrg2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=f3570633-cf6d-4d1c-99ce-3b5b00eff8b1;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=f3570633-cf6d-4d1c-99ce-3b5b00eff8b1;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=faf7eb3d27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1171 identity=13277 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f3570633-cf6d-4d1c-99ce-3b5b00eff8b1,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f3570633-cf6d-4d1c-99ce-3b5b00eff8b1,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9rrg2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=faf7eb3d27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1171 identity=13277 ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9rrg2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=faf7eb3d27 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1171 identity=13277 ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9rrg2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=faf7eb3d27 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1171 identity=13277 ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9rrg2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=faf7eb3d27 endpointID=1171 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-9rrg2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=f3570633-cf6d-4d1c-99ce-3b5b00eff8b1 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=f3570633-cf6d-4d1c-99ce-3b5b00eff8b1 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=faf7eb3d27 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1171 identity=13277 ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9rrg2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 bcddb074-d6ca-4c25-9f0c-686b075355a0 default }" containerID=b02142266b109de8924c1cfcd96874201c02770a5e41ee4df323941b9b612ab2 datapathConfiguration="&{false false false false false }" interface=lxc767d82b81d3d k8sPodName=ingress-nginx/ingress-nginx-admission-create-zmvsr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b02142266b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 ipv4=10.0.0.241 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zmvsr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b02142266b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5ed23d8a-c648-4759-bf58-4ac06f31f0f6,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=5ed23d8a-c648-4759-bf58-4ac06f31f0f6,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.241 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zmvsr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b02142266b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.241 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zmvsr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=5ed23d8a-c648-4759-bf58-4ac06f31f0f6;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=5ed23d8a-c648-4759-bf58-4ac06f31f0f6;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b02142266b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 identity=12822 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5ed23d8a-c648-4759-bf58-4ac06f31f0f6,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=5ed23d8a-c648-4759-bf58-4ac06f31f0f6,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.241 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zmvsr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b02142266b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 identity=12822 ipv4=10.0.0.241 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zmvsr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b02142266b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1229 identity=12822 ipv4=10.0.0.241 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zmvsr subsys=endpoint level=info msg="Successful endpoint creation" containerID=b02142266b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1229 identity=12822 ipv4=10.0.0.241 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zmvsr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b02142266b endpointID=1229 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-zmvsr subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=5ed23d8a-c648-4759-bf58-4ac06f31f0f6 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=5ed23d8a-c648-4759-bf58-4ac06f31f0f6 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=b02142266b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1229 identity=12822 ipv4=10.0.0.241 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zmvsr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 40cff36a-0ff5-4a36-b06f-8c41775282c0 default }" containerID=791491807711fb6a6b2ad6b2fcc47ed16ca6ab50355a43211925b25dd817a8ca datapathConfiguration="&{false false false false false }" interface=lxc9ca3d93a42cf k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tz9wc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7914918077 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3396 ipv4=10.0.0.113 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tz9wc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7914918077 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3396 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.113 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tz9wc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7914918077 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3396 identity=38674 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.113 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tz9wc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7914918077 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3396 identity=38674 ipv4=10.0.0.113 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tz9wc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7914918077 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3396 identity=38674 ipv4=10.0.0.113 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tz9wc subsys=endpoint level=info msg="Successful endpoint creation" containerID=7914918077 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3396 identity=38674 ipv4=10.0.0.113 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tz9wc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.145 3055b33d-0a4f-40bf-8321-8a554ca14b7f default }" containerID=f5c3d16b94236bf3870284e15cece156723d1401c1356f0e8ab2c04966caac6c datapathConfiguration="&{false false false false false }" interface=lxcdc86d408b011 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nh9zr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5c3d16b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 ipv4=10.0.0.145 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nh9zr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5c3d16b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a1209033-ece6-4698-b0a6-9db676610f49,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=a1209033-ece6-4698-b0a6-9db676610f49,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.145 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nh9zr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=a1209033-ece6-4698-b0a6-9db676610f49;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=a1209033-ece6-4698-b0a6-9db676610f49;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5c3d16b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 identity=64859 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a1209033-ece6-4698-b0a6-9db676610f49,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=a1209033-ece6-4698-b0a6-9db676610f49,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.145 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nh9zr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5c3d16b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 identity=64859 ipv4=10.0.0.145 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nh9zr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5c3d16b94 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2057 identity=64859 ipv4=10.0.0.145 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nh9zr subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5c3d16b94 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2057 identity=64859 ipv4=10.0.0.145 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nh9zr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f5c3d16b94 endpointID=2057 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-nh9zr subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=a1209033-ece6-4698-b0a6-9db676610f49 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=a1209033-ece6-4698-b0a6-9db676610f49 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=f5c3d16b94 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2057 identity=64859 ipv4=10.0.0.145 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nh9zr subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=43b8226d-96ba-42cc-b712-62ec99706858] Description:}]" policyAddRequest=bbc097bc-bf65-4dae-a91c-9d543288c588 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=bbc097bc-bf65-4dae-a91c-9d543288c588 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=5317f2fe-9eb7-47fd-8d9e-051fdf022965] Description:}]" policyAddRequest=f34accaf-f150-4853-94ed-58c9079abeae subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f34accaf-f150-4853-94ed-58c9079abeae policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.112 fb4de340-f3d6-4a85-af8d-537db53a8d58 default }" containerID=24d6fa073f403a323581876952b23699f4c33b2f8dc7e5f0c7183acd216c6c37 datapathConfiguration="&{false false false false false }" interface=lxcb730ea50bc17 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qvqw6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24d6fa073f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1061 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qvqw6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24d6fa073f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1061 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qvqw6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24d6fa073f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1061 identity=57715 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qvqw6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=24d6fa073f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1061 identity=57715 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qvqw6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=24d6fa073f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1061 identity=57715 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qvqw6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=24d6fa073f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1061 identity=57715 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qvqw6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.12 cb9c28dc-6952-4eb4-8166-1bec7171526e default }" containerID=b4b462ef01f545dcbb0443d4cfb758cd15fe628c8cc40bc9040fe22145b33a2d datapathConfiguration="&{false false false false false }" interface=lxc9c5d6e43711b k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s89g6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4b462ef01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s89g6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4b462ef01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s89g6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4b462ef01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=7548 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s89g6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4b462ef01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=7548 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s89g6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4b462ef01 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=10 identity=7548 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s89g6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4b462ef01 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=10 identity=7548 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s89g6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.122 b4481bf2-ff3d-4090-931e-afb3b5fb4643 default }" containerID=0279cdc16c65f03464eee5edf11079de60a5893627b8d25280b2adf3ed78d069 datapathConfiguration="&{false false false false false }" interface=lxc2494589e910b k8sPodName=openstack/pxc-operator-69cb5bbdb9-xbmd5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0279cdc16c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-xbmd5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0279cdc16c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-xbmd5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0279cdc16c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.122 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-xbmd5 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0279cdc16c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identity=14827 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-xbmd5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0279cdc16c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identity=14827 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-xbmd5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0279cdc16c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1777 identity=14827 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-xbmd5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0279cdc16c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1777 identity=14827 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-xbmd5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.57 71d146d6-3149-4a54-a050-81ca84386fd1 default }" containerID=379625267a6fec3ebb367916c23a123c5f6d9909c89fc2907c6227843f05785a datapathConfiguration="&{false false false false false }" interface=lxc22519521c19c k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=379625267a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=379625267a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=379625267a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.57 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=379625267a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 identity=4668 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=379625267a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 identity=4668 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=379625267a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=464 identity=4668 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=379625267a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=464 identity=4668 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.159 a3310f22-05f8-472e-8010-f032f5123b0e default }" containerID=7f170f3cf12eb3df5b04935cfdf739aadeec256f2edfeb9f04ebd4fe7c26965b datapathConfiguration="&{false false false false false }" interface=lxcae894726d675 k8sPodName=local-path-storage/helper-pod-create-pvc-1594f28f-f973-47b6-907c-e8e18e170cee labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f170f3cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1594f28f-f973-47b6-907c-e8e18e170cee subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f170f3cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1594f28f-f973-47b6-907c-e8e18e170cee subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f170f3cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 identity=7496 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1594f28f-f973-47b6-907c-e8e18e170cee oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f170f3cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 identity=7496 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1594f28f-f973-47b6-907c-e8e18e170cee subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f170f3cf1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=130 identity=7496 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1594f28f-f973-47b6-907c-e8e18e170cee subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f170f3cf1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=130 identity=7496 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1594f28f-f973-47b6-907c-e8e18e170cee subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7f170f3cf1 endpointID=130 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1594f28f-f973-47b6-907c-e8e18e170cee subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7f170f3cf1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=130 identity=7496 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1594f28f-f973-47b6-907c-e8e18e170cee subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 574162a0-e4f4-42af-8350-232358da2a6f default }" containerID=85d3fcd0675a5f895d432eb37931b9c1c5ef1646f03263af932844191641ad5a datapathConfiguration="&{false false false false false }" interface=lxc25526b7812f0 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85d3fcd067 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1944 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85d3fcd067 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1944 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85d3fcd067 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1944 identity=36312 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85d3fcd067 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1944 identity=36312 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85d3fcd067 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1944 identity=36312 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=85d3fcd067 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1944 identity=36312 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=afcd909b-5be1-4034-83f0-d7b537fa5a44] Description:}]" policyAddRequest=1337d90a-a738-4719-a4ff-1e0a407fdb22 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=1337d90a-a738-4719-a4ff-1e0a407fdb22 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.167 f95c27fa-b6ba-4d6a-8fcb-968f3571b798 default }" containerID=5511e24c45252fcef9716c75b56ad8c28e1a079fec35c923c316bc15759f9090 datapathConfiguration="&{false false false false false }" interface=lxcf84cb72623bb k8sPodName=local-path-storage/helper-pod-create-pvc-a13a673a-6e5d-4f51-ad5a-7113609aa417 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5511e24c45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1369 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a13a673a-6e5d-4f51-ad5a-7113609aa417 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5511e24c45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1369 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a13a673a-6e5d-4f51-ad5a-7113609aa417 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5511e24c45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1369 identity=7496 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a13a673a-6e5d-4f51-ad5a-7113609aa417 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5511e24c45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1369 identity=7496 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a13a673a-6e5d-4f51-ad5a-7113609aa417 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5511e24c45 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1369 identity=7496 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a13a673a-6e5d-4f51-ad5a-7113609aa417 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5511e24c45 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1369 identity=7496 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a13a673a-6e5d-4f51-ad5a-7113609aa417 subsys=daemon level=info msg="Delete endpoint request" containerID=5511e24c45 endpointID=1369 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a13a673a-6e5d-4f51-ad5a-7113609aa417 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5511e24c45 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1369 identity=7496 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a13a673a-6e5d-4f51-ad5a-7113609aa417 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 c02a6212-362e-49fc-99f6-01b793216f41 default }" containerID=3cf3fc66d20b5863d22f480c0b31cf3d617acfbccd9f3b08da825f587230e4a4 datapathConfiguration="&{false false false false false }" interface=lxc5cc6dff14c6a k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3cf3fc66d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4004 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3cf3fc66d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4004 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3cf3fc66d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4004 identity=26339 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3cf3fc66d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4004 identity=26339 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3cf3fc66d2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4004 identity=26339 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3cf3fc66d2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4004 identity=26339 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=715389f7-5e4d-4a1c-8c59-c523b6c01dbb] Description:}]" policyAddRequest=b006df68-439b-4115-9ba6-44252b13c31c subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=b006df68-439b-4115-9ba6-44252b13c31c policyRevision=5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.33 d277c827-7e12-46e0-8463-f8cbffc6fc00 default }" containerID=e3e34d10799d4bcd75fe6a6a6b251b0256e709812c4209e6378f04d245e500d2 datapathConfiguration="&{false false false false false }" interface=lxc6335d6ee5bf9 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3e34d1079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 ipv4=10.0.0.33 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3e34d1079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.33 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e3e34d1079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.33 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3e34d1079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identity=16856 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.33 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3e34d1079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identity=16856 ipv4=10.0.0.33 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3e34d1079 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=740 identity=16856 ipv4=10.0.0.33 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3e34d1079 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=740 identity=16856 ipv4=10.0.0.33 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009431601444668388 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.116 7bb581df-c6ac-42e1-a41b-751d3bb17924 default }" containerID=83bf38ac3c71f72187cc6d94f4e91379fee8bca0890aad5ba5d061be52d278c7 datapathConfiguration="&{false false false false false }" interface=lxc35ac4eef9242 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cz6v2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83bf38ac3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cz6v2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83bf38ac3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cz6v2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=83bf38ac3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cz6v2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83bf38ac3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 identity=25299 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cz6v2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83bf38ac3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 identity=25299 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cz6v2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83bf38ac3c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1976 identity=25299 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cz6v2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=83bf38ac3c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1976 identity=25299 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cz6v2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.238 431d6ace-90a3-4768-b931-d7f245c5917f default }" containerID=c8a0708b9cd43ebf895372731a6d23962b96cf78bf78d75286ebc82801f78fa5 datapathConfiguration="&{false false false false false }" interface=lxcb344aa5c4a6d k8sPodName=monitoring/node-feature-discovery-worker-km8mr labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.149 f1cb0e9d-fcef-4126-879f-648adc12da42 default }" containerID=c469e2a9b0460c496eb1604e49af9dcca0b69cfba8f40bae0526239acf8fd9db datapathConfiguration="&{false false false false false }" interface=lxc9ac8dba7ea10 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wr25s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8a0708b9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3176 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-km8mr subsys=endpoint level=info msg="New endpoint" containerID=c469e2a9b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wr25s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c469e2a9b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wr25s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=c8a0708b9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3176 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-km8mr subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c469e2a9b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identity=2836 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wr25s oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=c469e2a9b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identity=2836 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wr25s subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8a0708b9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3176 identity=5161 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-km8mr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8a0708b9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3176 identity=5161 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-km8mr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c469e2a9b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=571 identity=2836 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wr25s subsys=endpoint level=info msg="Successful endpoint creation" containerID=c469e2a9b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=571 identity=2836 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wr25s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c8a0708b9c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3176 identity=5161 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-km8mr subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8a0708b9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3176 identity=5161 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-km8mr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.30 bae7746f-8e14-4d80-a265-a7b43d731aaa default }" containerID=342c8d5bf33baceebc32330a835b02d68537aa7fe81835efb4a8a5180527919c datapathConfiguration="&{false false false false false }" interface=lxcd5a80684c0ce k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lxt98 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=342c8d5bf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 ipv4=10.0.0.30 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lxt98 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=342c8d5bf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.30 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lxt98 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=342c8d5bf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.30 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lxt98 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=342c8d5bf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 identity=30561 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.30 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lxt98 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=342c8d5bf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 identity=30561 ipv4=10.0.0.30 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lxt98 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=342c8d5bf3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2947 identity=30561 ipv4=10.0.0.30 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lxt98 subsys=endpoint level=info msg="Successful endpoint creation" containerID=342c8d5bf3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2947 identity=30561 ipv4=10.0.0.30 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lxt98 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1405 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01405 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01405 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01405 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01405:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1405 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 bd1291dc-56e8-4e8a-9fe5-fecd56bb106a default }" containerID=e6f6ac56c6a14b3eb82fa140877c704f6a983c9035f8294e817353b7f22b8b05 datapathConfiguration="&{false false false false false }" interface=lxc639662af8039 k8sPodName=monitoring/kube-prometheus-stack-admission-create-h8869 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6f6ac56c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h8869 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6f6ac56c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=08878adc-c5ad-4e2b-aae6-f9c5193c7ecd,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=08878adc-c5ad-4e2b-aae6-f9c5193c7ecd,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h8869 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=08878adc-c5ad-4e2b-aae6-f9c5193c7ecd;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=08878adc-c5ad-4e2b-aae6-f9c5193c7ecd;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6f6ac56c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identity=5823 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=08878adc-c5ad-4e2b-aae6-f9c5193c7ecd,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=08878adc-c5ad-4e2b-aae6-f9c5193c7ecd,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h8869 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6f6ac56c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identity=5823 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h8869 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e6f6ac56c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=719 identity=5823 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h8869 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6f6ac56c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=719 identity=5823 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h8869 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e6f6ac56c6 endpointID=719 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-h8869 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=08878adc-c5ad-4e2b-aae6-f9c5193c7ecd k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=08878adc-c5ad-4e2b-aae6-f9c5193c7ecd k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=e6f6ac56c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=719 identity=5823 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h8869 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 264674a0-3a68-4d07-abee-260f937c8be1 default }" containerID=d3c9456352d322ab56fb6267e9d25ffcc627bc381a90eae3f8b7e93548faa521 datapathConfiguration="&{false false false false false }" interface=lxc4a0b078a40e4 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rkvt6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3c9456352 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3420 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rkvt6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3c9456352 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3420 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rkvt6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d3c9456352 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3420 identity=40726 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rkvt6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d3c9456352 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3420 identity=40726 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rkvt6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 eeec847d-83b0-421c-b2c2-22280ee2bf88 default }" containerID=2f5c9d58e2b78456e513ce812550ce96ee4ba48a90bb2b2ce43fccfad36d5ef8 datapathConfiguration="&{false false false false false }" interface=lxc26c870e3c95b k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vthhz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f5c9d58e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vthhz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f5c9d58e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vthhz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f5c9d58e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 identity=19364 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vthhz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f5c9d58e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 identity=19364 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vthhz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d3c9456352 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3420 identity=40726 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rkvt6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3c9456352 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3420 identity=40726 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rkvt6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.173 69cc1123-2aa1-4308-887d-b1a7537770af default }" containerID=6fe93a63fbb8e7dc4ae15cf070f0d0a137725128a787ab63b23d9b9e0c4b1ced datapathConfiguration="&{false false false false false }" interface=lxc1a61208c57b1 k8sPodName=monitoring/kube-prometheus-stack-grafana-6cd6d588b7-hv8kw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fe93a63fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1930 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cd6d588b7-hv8kw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fe93a63fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1930 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cd6d588b7-hv8kw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fe93a63fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1930 identity=50801 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cd6d588b7-hv8kw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fe93a63fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1930 identity=50801 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cd6d588b7-hv8kw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f5c9d58e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=250 identity=19364 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vthhz subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f5c9d58e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=250 identity=19364 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vthhz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6fe93a63fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1930 identity=50801 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cd6d588b7-hv8kw subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fe93a63fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1930 identity=50801 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cd6d588b7-hv8kw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.34 b66d1608-ec74-4718-bb7d-19a55f056ca4 default }" containerID=9142572bb1cd57ae9ca5bfa05c806b23450f85c048f41e00d61536ed2de1add8 datapathConfiguration="&{false false false false false }" interface=lxc7bbb58ff163d k8sPodName=monitoring/kube-prometheus-stack-admission-patch-d5rpq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9142572bb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1388 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-d5rpq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9142572bb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1388 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c54f0638-dd66-4f6b-8520-9ba0c045cfbe,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c54f0638-dd66-4f6b-8520-9ba0c045cfbe,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-d5rpq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=c54f0638-dd66-4f6b-8520-9ba0c045cfbe;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=c54f0638-dd66-4f6b-8520-9ba0c045cfbe;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9142572bb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1388 identity=22662 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c54f0638-dd66-4f6b-8520-9ba0c045cfbe,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c54f0638-dd66-4f6b-8520-9ba0c045cfbe,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-d5rpq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9142572bb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1388 identity=22662 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-d5rpq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9142572bb1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1388 identity=22662 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-d5rpq subsys=endpoint level=info msg="Successful endpoint creation" containerID=9142572bb1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1388 identity=22662 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-d5rpq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9142572bb1 endpointID=1388 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-d5rpq subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=c54f0638-dd66-4f6b-8520-9ba0c045cfbe k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=c54f0638-dd66-4f6b-8520-9ba0c045cfbe k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=9142572bb1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1388 identity=22662 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-d5rpq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 8e72faf1-60c7-4bf7-bf76-996b67e6890c default }" containerID=435565ee33983c701b2a2cc28c549f30cf6a1567ef392d874fd6ab57fa666523 datapathConfiguration="&{false false false false false }" interface=lxc50b6715754f8 k8sPodName=local-path-storage/helper-pod-create-pvc-2f04e196-ff0c-4269-b3dd-38c58b931f6e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=435565ee33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f04e196-ff0c-4269-b3dd-38c58b931f6e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=435565ee33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f04e196-ff0c-4269-b3dd-38c58b931f6e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=435565ee33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 identity=7496 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f04e196-ff0c-4269-b3dd-38c58b931f6e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=435565ee33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 identity=7496 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f04e196-ff0c-4269-b3dd-38c58b931f6e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=435565ee33 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3941 identity=7496 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f04e196-ff0c-4269-b3dd-38c58b931f6e subsys=endpoint level=info msg="Successful endpoint creation" containerID=435565ee33 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3941 identity=7496 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f04e196-ff0c-4269-b3dd-38c58b931f6e subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.211 f07ed59c-3af7-4848-942f-5bf485d950fb default }" containerID=7952b0a54da7d26a6ae1366f2408d064e2f479a610b37742f8997dff2c5dd529 datapathConfiguration="&{false false false false false }" interface=lxce04cd5442690 k8sPodName=local-path-storage/helper-pod-create-pvc-f2b0e9ce-2abf-467e-bfa5-a1bcb84a93ad labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7952b0a54d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2776 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2b0e9ce-2abf-467e-bfa5-a1bcb84a93ad subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7952b0a54d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2776 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2b0e9ce-2abf-467e-bfa5-a1bcb84a93ad subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7952b0a54d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2776 identity=7496 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2b0e9ce-2abf-467e-bfa5-a1bcb84a93ad oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7952b0a54d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2776 identity=7496 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2b0e9ce-2abf-467e-bfa5-a1bcb84a93ad subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7952b0a54d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2776 identity=7496 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2b0e9ce-2abf-467e-bfa5-a1bcb84a93ad subsys=endpoint level=info msg="Successful endpoint creation" containerID=7952b0a54d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2776 identity=7496 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2b0e9ce-2abf-467e-bfa5-a1bcb84a93ad subsys=daemon level=info msg="Delete endpoint request" containerID=435565ee33 endpointID=3941 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2f04e196-ff0c-4269-b3dd-38c58b931f6e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=435565ee33 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3941 identity=7496 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f04e196-ff0c-4269-b3dd-38c58b931f6e subsys=endpoint level=info msg="Delete endpoint request" containerID=7952b0a54d endpointID=2776 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f2b0e9ce-2abf-467e-bfa5-a1bcb84a93ad subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7952b0a54d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2776 identity=7496 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2b0e9ce-2abf-467e-bfa5-a1bcb84a93ad subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 9bcc21c8-ad4e-49df-95a0-8f432c0c45ac default }" containerID=56c60460458a25dc30ee1bd5878111c5e0b324b111640608ec50a99fb1f4681b datapathConfiguration="&{false false false false false }" interface=lxc6430bf1c055d k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56c6046045 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2972 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56c6046045 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2972 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56c6046045 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2972 identity=56488 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56c6046045 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2972 identity=56488 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=56c6046045 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2972 identity=56488 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=56c6046045 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2972 identity=56488 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.202 66031154-191b-45c2-ad15-e517cd3b206d default }" containerID=35b419dd59d623ee489534c6e6ea384a66dd1afdff718c2cb330971fe5d183a2 datapathConfiguration="&{false false false false false }" interface=lxc0028703e5b6b k8sPodName=monitoring/loki-gateway-cf54cb88c-9h8ww labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35b419dd59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2350 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9h8ww subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35b419dd59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2350 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9h8ww subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35b419dd59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2350 identity=64354 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9h8ww oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35b419dd59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2350 identity=64354 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9h8ww subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.82 f0f1f03f-41c7-4d83-b763-3e651a7252c7 default }" containerID=9e2ff69bb1214cd2cf0f45573064c870a80c2a2743b7182e0741a2c171c40a17 datapathConfiguration="&{false false false false false }" interface=lxc395d7d1129e8 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e2ff69bb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3409 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 042c6a89-d128-4142-a84e-c18e50816880 default }" containerID=4be28ac90aef3d2c2103d9128790497925e8c9b9a57bf303f1fc70f44726d3a5 datapathConfiguration="&{false false false false false }" interface=lxc575e5fe957ff k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=9e2ff69bb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3409 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="New endpoint" containerID=4be28ac90a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2686 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=4be28ac90a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2686 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 f348c30e-e4ea-4712-89eb-10166f38462a default }" containerID=4bab6478f3171e0f5d704c62a90d73cd1abfa3de094d04ae4459fa98bdfdfea8 datapathConfiguration="&{false false false false false }" interface=lxce06a618be8f7 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4bab6478f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4bab6478f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e2ff69bb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3409 identity=17267 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e2ff69bb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3409 identity=17267 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=4be28ac90a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2686 identity=47590 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4be28ac90a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2686 identity=47590 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4bab6478f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 identity=1049 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4bab6478f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 identity=1049 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35b419dd59 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2350 identity=64354 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9h8ww subsys=endpoint level=info msg="Successful endpoint creation" containerID=35b419dd59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2350 identity=64354 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9h8ww subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9e2ff69bb1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3409 identity=17267 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e2ff69bb1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3409 identity=17267 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4be28ac90a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2686 identity=47590 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4be28ac90a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2686 identity=47590 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4bab6478f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2940 identity=1049 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4bab6478f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2940 identity=1049 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.32 dff09f4f-45f2-46d8-8ba1-46296fcb5a17 default }" containerID=f756d6bc11c503d109841044c4c42d9c5c3b2f20e8f9a6d8a0c21e144d827606 datapathConfiguration="&{false false false false false }" interface=lxc6ba6f8fec0bd k8sPodName=local-path-storage/helper-pod-create-pvc-1c5ecced-00b9-4128-bad7-4f703cdf96a0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f756d6bc11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c5ecced-00b9-4128-bad7-4f703cdf96a0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f756d6bc11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c5ecced-00b9-4128-bad7-4f703cdf96a0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f756d6bc11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=7496 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c5ecced-00b9-4128-bad7-4f703cdf96a0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f756d6bc11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=7496 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c5ecced-00b9-4128-bad7-4f703cdf96a0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f756d6bc11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=131 identity=7496 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c5ecced-00b9-4128-bad7-4f703cdf96a0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f756d6bc11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=131 identity=7496 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c5ecced-00b9-4128-bad7-4f703cdf96a0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.152 dbd17135-cf3f-41f3-a007-f063239fd287 default }" containerID=6f0a97c36859656c1ece22d03e5066c22865ff5e0ac7ef8217e441f17127ccb0 datapathConfiguration="&{false false false false false }" interface=lxc96deeff14719 k8sPodName=monitoring/vector-j8qfj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f0a97c368 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3483 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/vector-j8qfj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f0a97c368 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3483 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/vector-j8qfj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f0a97c368 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3483 identity=8112 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/vector-j8qfj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f0a97c368 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3483 identity=8112 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/vector-j8qfj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6f0a97c368 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3483 identity=8112 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/vector-j8qfj subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f0a97c368 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3483 identity=8112 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/vector-j8qfj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f756d6bc11 endpointID=131 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1c5ecced-00b9-4128-bad7-4f703cdf96a0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f756d6bc11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=131 identity=7496 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c5ecced-00b9-4128-bad7-4f703cdf96a0 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.119 fb4b2660-8f24-438c-870d-47f62a85151f default }" containerID=557b945d824181694a64e21dd737506b6979fff8a9f1b9860a950a61b6b55172 datapathConfiguration="&{false false false false false }" interface=lxc1f346b8bd4a6 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=557b945d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=557b945d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=557b945d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=557b945d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=23149 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=557b945d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=23149 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=557b945d82 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=169 identity=23149 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=557b945d82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=169 identity=23149 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.156 22679519-8e36-4a16-82b6-d325d519a320 default }" containerID=bb4cca3f93d13d0053715c2880dc64153f99137d58a1282d2d78e61ad3fa2128 datapathConfiguration="&{false false false false false }" interface=lxc4f148a471b82 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-hzfdh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb4cca3f93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3800 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-hzfdh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb4cca3f93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3800 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-hzfdh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb4cca3f93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3800 identity=37193 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-hzfdh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb4cca3f93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3800 identity=37193 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-hzfdh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb4cca3f93 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3800 identity=37193 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-hzfdh subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb4cca3f93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3800 identity=37193 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-hzfdh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.25 65e67578-52ff-4295-bc9c-08b92728e501 default }" containerID=4029d92e66464a0a75fdc21a08c3736f817a5a295d569d73aed37fa4ef93f482 datapathConfiguration="&{false false false false false }" interface=lxc27aad14f75c6 k8sPodName=openstack/memcached-memcached-6479589586-b7pjj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4029d92e66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1524 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-b7pjj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4029d92e66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1524 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-b7pjj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4029d92e66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1524 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.25 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-b7pjj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4029d92e66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1524 identity=47927 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-b7pjj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4029d92e66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1524 identity=47927 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-b7pjj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4029d92e66 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1524 identity=47927 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-b7pjj subsys=endpoint level=info msg="Successful endpoint creation" containerID=4029d92e66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1524 identity=47927 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-b7pjj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.51 83a8da7e-82c4-4178-a741-6d5dec65e853 default }" containerID=355c9e68020015b611a7b6c4f7d02114dfa3a5c66cf0737840b40faa95097878 datapathConfiguration="&{false false false false false }" interface=lxc514bebcc10bc k8sPodName=local-path-storage/helper-pod-create-pvc-64092c3f-ffd4-485f-9cc4-0f9faaf03ea2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=355c9e6802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=291 ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-64092c3f-ffd4-485f-9cc4-0f9faaf03ea2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=355c9e6802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=291 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-64092c3f-ffd4-485f-9cc4-0f9faaf03ea2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=355c9e6802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=291 identity=7496 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-64092c3f-ffd4-485f-9cc4-0f9faaf03ea2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=355c9e6802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=291 identity=7496 ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-64092c3f-ffd4-485f-9cc4-0f9faaf03ea2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=355c9e6802 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=291 identity=7496 ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-64092c3f-ffd4-485f-9cc4-0f9faaf03ea2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=355c9e6802 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=291 identity=7496 ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-64092c3f-ffd4-485f-9cc4-0f9faaf03ea2 subsys=daemon level=info msg="Delete endpoint request" containerID=355c9e6802 endpointID=291 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-64092c3f-ffd4-485f-9cc4-0f9faaf03ea2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=355c9e6802 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=291 identity=7496 ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-64092c3f-ffd4-485f-9cc4-0f9faaf03ea2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 9cd3b9b4-2fbd-4ae8-8271-4f790d015326 default }" containerID=7f004ca31e7880c42d3ec3e0843120416dfd73b793ef5d5e27ace64a823d5ec1 datapathConfiguration="&{false false false false false }" interface=lxcaa3dbe827339 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f004ca31e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f004ca31e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f004ca31e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identity=15044 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f004ca31e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identity=15044 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7f004ca31e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=719 identity=15044 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f004ca31e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=719 identity=15044 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.114 5a42a69d-62c7-4120-8176-4311a4b9d049 default }" containerID=3d9db748f281a8c52fdfe379268fa8adf51137cf45cafc50e828720ab889cdb7 datapathConfiguration="&{false false false false false }" interface=lxcfb55741dd981 k8sPodName=openstack/keystone-api-79768dc498-cxltt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d9db748f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1018 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-api-79768dc498-cxltt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d9db748f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1018 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-api-79768dc498-cxltt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d9db748f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1018 identity=20954 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-api-79768dc498-cxltt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d9db748f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1018 identity=20954 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-api-79768dc498-cxltt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 8b4bf1a2-4e23-497f-b6a7-ae1f537e8be0 default }" containerID=70f0f2ae8260311917cb9d6b370be0c838cce5733676fe15a7d713c5a296d193 datapathConfiguration="&{false false false false false }" interface=lxc97adda2fe629 k8sPodName=openstack/keystone-credential-setup-gt8g2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70f0f2ae82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-credential-setup-gt8g2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70f0f2ae82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=be694c0f-43e7-45d1-82d7-1a1bdd82fdf6,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=be694c0f-43e7-45d1-82d7-1a1bdd82fdf6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-credential-setup-gt8g2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=be694c0f-43e7-45d1-82d7-1a1bdd82fdf6;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=be694c0f-43e7-45d1-82d7-1a1bdd82fdf6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70f0f2ae82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 identity=60383 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=be694c0f-43e7-45d1-82d7-1a1bdd82fdf6,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=be694c0f-43e7-45d1-82d7-1a1bdd82fdf6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-credential-setup-gt8g2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70f0f2ae82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 identity=60383 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-credential-setup-gt8g2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d9db748f2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1018 identity=20954 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-api-79768dc498-cxltt subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d9db748f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1018 identity=20954 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-api-79768dc498-cxltt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=70f0f2ae82 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1950 identity=60383 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-credential-setup-gt8g2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=70f0f2ae82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1950 identity=60383 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-credential-setup-gt8g2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=70f0f2ae82 endpointID=1950 k8sNamespace=openstack k8sPodName=keystone-credential-setup-gt8g2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=be694c0f-43e7-45d1-82d7-1a1bdd82fdf6 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=be694c0f-43e7-45d1-82d7-1a1bdd82fdf6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=70f0f2ae82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1950 identity=60383 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-credential-setup-gt8g2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 a24f3cc3-0490-453f-a3d3-c50604521bef default }" containerID=0f5a73ea02eec60f0503d77ddefd68e16c864edba07ec7c483433870de9ccb26 datapathConfiguration="&{false false false false false }" interface=lxc3705e5e2b09d k8sPodName=openstack/keystone-db-init-dz4q8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f5a73ea02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-db-init-dz4q8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f5a73ea02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a0216d37-00c6-48cb-b6b8-c411375c4b77,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a0216d37-00c6-48cb-b6b8-c411375c4b77,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-db-init-dz4q8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0f5a73ea02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-db-init-dz4q8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a0216d37-00c6-48cb-b6b8-c411375c4b77;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=a0216d37-00c6-48cb-b6b8-c411375c4b77;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f5a73ea02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 identity=33490 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a0216d37-00c6-48cb-b6b8-c411375c4b77,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a0216d37-00c6-48cb-b6b8-c411375c4b77,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-db-init-dz4q8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f5a73ea02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 identity=33490 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-db-init-dz4q8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f5a73ea02 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2086 identity=33490 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-db-init-dz4q8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f5a73ea02 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2086 identity=33490 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-db-init-dz4q8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0f5a73ea02 endpointID=2086 k8sNamespace=openstack k8sPodName=keystone-db-init-dz4q8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a0216d37-00c6-48cb-b6b8-c411375c4b77 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=a0216d37-00c6-48cb-b6b8-c411375c4b77 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0f5a73ea02 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2086 identity=33490 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-db-init-dz4q8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 d7b1dd8f-df6b-4add-912b-239a6663b800 default }" containerID=739ee9bb04a0f52b0b3a361e8b661fc0940675ea0fe2d903c68b3e91f190d47f datapathConfiguration="&{false false false false false }" interface=lxcc55ed4d1b81a k8sPodName=openstack/keystone-fernet-setup-qtghz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=739ee9bb04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=467 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-qtghz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=739ee9bb04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=467 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=79df9891-4b4c-4364-bbb9-6566d384e160,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=79df9891-4b4c-4364-bbb9-6566d384e160,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-qtghz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=79df9891-4b4c-4364-bbb9-6566d384e160;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=79df9891-4b4c-4364-bbb9-6566d384e160;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=739ee9bb04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=467 identity=42925 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=79df9891-4b4c-4364-bbb9-6566d384e160,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=79df9891-4b4c-4364-bbb9-6566d384e160,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-qtghz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=739ee9bb04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=467 identity=42925 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-qtghz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=739ee9bb04 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=467 identity=42925 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-qtghz subsys=endpoint level=info msg="Successful endpoint creation" containerID=739ee9bb04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=467 identity=42925 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-qtghz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=739ee9bb04 endpointID=467 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-qtghz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=79df9891-4b4c-4364-bbb9-6566d384e160 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=79df9891-4b4c-4364-bbb9-6566d384e160 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=739ee9bb04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=467 identity=42925 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-fernet-setup-qtghz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 f23ba217-71fd-4265-ae48-dc96d644a416 default }" containerID=a6037b4c741572e900ad73f4b882eb9cc529ffddd0e0dc42ad6c882877c28de7 datapathConfiguration="&{false false false false false }" interface=lxccc401b5fecb5 k8sPodName=openstack/keystone-db-sync-pq5lb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6037b4c74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-db-sync-pq5lb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6037b4c74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=360f403b-24be-4abf-b8a5-a78633381e54,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=360f403b-24be-4abf-b8a5-a78633381e54,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-db-sync-pq5lb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=360f403b-24be-4abf-b8a5-a78633381e54;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=360f403b-24be-4abf-b8a5-a78633381e54;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6037b4c74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 identity=43566 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=360f403b-24be-4abf-b8a5-a78633381e54,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=360f403b-24be-4abf-b8a5-a78633381e54,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-db-sync-pq5lb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a6037b4c74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 identity=43566 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-db-sync-pq5lb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6037b4c74 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=638 identity=43566 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-db-sync-pq5lb subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6037b4c74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=638 identity=43566 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-db-sync-pq5lb subsys=daemon level=info msg="Delete endpoint request" containerID=a6037b4c74 endpointID=638 k8sNamespace=openstack k8sPodName=keystone-db-sync-pq5lb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=360f403b-24be-4abf-b8a5-a78633381e54 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=360f403b-24be-4abf-b8a5-a78633381e54 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a6037b4c74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=638 identity=43566 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-db-sync-pq5lb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 8582055c-7a0e-49f1-b921-e47845fa6c42 default }" containerID=e7131870572e58a2323b894e0b0541cb414f50fc3cf5d0c1ce60485388fb6f39 datapathConfiguration="&{false false false false false }" interface=lxc46bbc3b79ee0 k8sPodName=openstack/keystone-rabbit-init-mmxzb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e713187057 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2780 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-rabbit-init-mmxzb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e713187057 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2780 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c6c98bff-aa0c-4114-b85d-17d844d3753f,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c6c98bff-aa0c-4114-b85d-17d844d3753f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-rabbit-init-mmxzb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c6c98bff-aa0c-4114-b85d-17d844d3753f;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c6c98bff-aa0c-4114-b85d-17d844d3753f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e713187057 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2780 identity=44143 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c6c98bff-aa0c-4114-b85d-17d844d3753f,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c6c98bff-aa0c-4114-b85d-17d844d3753f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-rabbit-init-mmxzb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e713187057 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2780 identity=44143 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-rabbit-init-mmxzb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e713187057 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2780 identity=44143 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-rabbit-init-mmxzb subsys=endpoint level=info msg="Successful endpoint creation" containerID=e713187057 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2780 identity=44143 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-rabbit-init-mmxzb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e713187057 endpointID=2780 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-mmxzb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c6c98bff-aa0c-4114-b85d-17d844d3753f k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c6c98bff-aa0c-4114-b85d-17d844d3753f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e713187057 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2780 identity=44143 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-rabbit-init-mmxzb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 9817a0fb-9b84-465e-9b6a-d96965adfb9d default }" containerID=dc4d91e4a246ddd9568a033d44203b3537086c7c0225a09db06d378533ea283b datapathConfiguration="&{false false false false false }" interface=lxc51bd1d80b949 k8sPodName=openstack/keystone-domain-manage-jpq7z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc4d91e4a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-domain-manage-jpq7z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc4d91e4a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=99ecb9da-a8ea-4f9e-8b2a-aee13cf7e601,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=99ecb9da-a8ea-4f9e-8b2a-aee13cf7e601,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-domain-manage-jpq7z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=99ecb9da-a8ea-4f9e-8b2a-aee13cf7e601;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=99ecb9da-a8ea-4f9e-8b2a-aee13cf7e601;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc4d91e4a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identity=1896 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=99ecb9da-a8ea-4f9e-8b2a-aee13cf7e601,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=99ecb9da-a8ea-4f9e-8b2a-aee13cf7e601,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-domain-manage-jpq7z oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=dc4d91e4a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identity=1896 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-domain-manage-jpq7z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc4d91e4a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=41 identity=1896 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-domain-manage-jpq7z subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc4d91e4a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=41 identity=1896 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-domain-manage-jpq7z subsys=daemon level=info msg="Delete endpoint request" containerID=dc4d91e4a2 endpointID=41 k8sNamespace=openstack k8sPodName=keystone-domain-manage-jpq7z subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=99ecb9da-a8ea-4f9e-8b2a-aee13cf7e601 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=99ecb9da-a8ea-4f9e-8b2a-aee13cf7e601 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=dc4d91e4a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=41 identity=1896 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-domain-manage-jpq7z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 82f7d90b-d221-43b3-af9f-54608d5c7e4f default }" containerID=5352cab21182794dccc076ead649836efae717d84be8295fd1d110d5fdcdf338 datapathConfiguration="&{false false false false false }" interface=lxcdaf95d637129 k8sPodName=openstack/keystone-bootstrap-rdr4w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5352cab211 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-bootstrap-rdr4w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5352cab211 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fd844e47-138b-43f4-b737-379e9ee4c1ca,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=fd844e47-138b-43f4-b737-379e9ee4c1ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-bootstrap-rdr4w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fd844e47-138b-43f4-b737-379e9ee4c1ca;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=fd844e47-138b-43f4-b737-379e9ee4c1ca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5352cab211 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identity=39071 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fd844e47-138b-43f4-b737-379e9ee4c1ca,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=fd844e47-138b-43f4-b737-379e9ee4c1ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-bootstrap-rdr4w oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5352cab211 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identity=39071 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-bootstrap-rdr4w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5352cab211 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=832 identity=39071 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-bootstrap-rdr4w subsys=endpoint level=info msg="Successful endpoint creation" containerID=5352cab211 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=832 identity=39071 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-bootstrap-rdr4w subsys=daemon level=info msg="Delete endpoint request" containerID=5352cab211 endpointID=832 k8sNamespace=openstack k8sPodName=keystone-bootstrap-rdr4w subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fd844e47-138b-43f4-b737-379e9ee4c1ca k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=fd844e47-138b-43f4-b737-379e9ee4c1ca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5352cab211 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=832 identity=39071 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-bootstrap-rdr4w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 d36870cb-e294-465b-90fa-52916f6f3d20 default }" containerID=505daba0d3737b9b3f0602b89a1617346baac66ce6ab815f0c8f46a1c1af0296 datapathConfiguration="&{false false false false false }" interface=lxc298e42de7e41 k8sPodName=local-path-storage/helper-pod-create-pvc-5efb0a80-aa00-4801-8c15-a1e842ca74d7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=505daba0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=957 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5efb0a80-aa00-4801-8c15-a1e842ca74d7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=505daba0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=957 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5efb0a80-aa00-4801-8c15-a1e842ca74d7 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=505daba0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=957 identity=7496 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5efb0a80-aa00-4801-8c15-a1e842ca74d7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=505daba0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=957 identity=7496 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5efb0a80-aa00-4801-8c15-a1e842ca74d7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=505daba0d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=957 identity=7496 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5efb0a80-aa00-4801-8c15-a1e842ca74d7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=505daba0d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=957 identity=7496 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5efb0a80-aa00-4801-8c15-a1e842ca74d7 subsys=daemon level=info msg="Delete endpoint request" containerID=505daba0d3 endpointID=957 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5efb0a80-aa00-4801-8c15-a1e842ca74d7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=505daba0d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=957 identity=7496 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5efb0a80-aa00-4801-8c15-a1e842ca74d7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 3a2804e3-5c31-4961-9a15-65c3fdf0dc55 default }" containerID=b9c34fdbe0704f3f291843c16dc8f9874d32edf9e805636a2dfab202ccd75a4f datapathConfiguration="&{false false false false false }" interface=lxc88c2cdf86a34 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9c34fdbe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9c34fdbe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9c34fdbe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 identity=32006 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9c34fdbe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 identity=32006 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b9c34fdbe0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2623 identity=32006 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9c34fdbe0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2623 identity=32006 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03519350169762062 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.54 4502c8be-93dc-4bb7-b3a9-f9c53235a9d7 default }" containerID=63afa369ef34f60aed90012a2535442b4faecf9f1e449f85b4fed8f831acf287 datapathConfiguration="&{false false false false false }" interface=lxc0eeda89d9afa k8sPodName=openstack/barbican-api-f664c4b48-6kgnn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63afa369ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2099 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/barbican-api-f664c4b48-6kgnn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63afa369ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2099 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/barbican-api-f664c4b48-6kgnn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63afa369ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2099 identity=8854 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/barbican-api-f664c4b48-6kgnn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63afa369ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2099 identity=8854 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/barbican-api-f664c4b48-6kgnn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.123 f61e77f2-e8c9-4a0f-b29b-ceb6d0c96734 default }" containerID=fa5ef9cb37e159b654b6ee0ddb5fa87b2d2e650d181a98d402d4eab6a828b3a1 datapathConfiguration="&{false false false false false }" interface=lxc2cacdd404b57 k8sPodName=openstack/barbican-db-init-z8rlq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa5ef9cb37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2651 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-db-init-z8rlq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa5ef9cb37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2651 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6dbcde06-aa0c-4b4d-bb5d-60eb5dcc7ec0,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=6dbcde06-aa0c-4b4d-bb5d-60eb5dcc7ec0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-db-init-z8rlq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=6dbcde06-aa0c-4b4d-bb5d-60eb5dcc7ec0;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=6dbcde06-aa0c-4b4d-bb5d-60eb5dcc7ec0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa5ef9cb37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2651 identity=37279 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6dbcde06-aa0c-4b4d-bb5d-60eb5dcc7ec0,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=6dbcde06-aa0c-4b4d-bb5d-60eb5dcc7ec0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-db-init-z8rlq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa5ef9cb37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2651 identity=37279 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-db-init-z8rlq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63afa369ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2099 identity=8854 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/barbican-api-f664c4b48-6kgnn subsys=endpoint level=info msg="Successful endpoint creation" containerID=63afa369ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2099 identity=8854 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/barbican-api-f664c4b48-6kgnn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fa5ef9cb37 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2651 identity=37279 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-db-init-z8rlq subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa5ef9cb37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2651 identity=37279 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-db-init-z8rlq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fa5ef9cb37 endpointID=2651 k8sNamespace=openstack k8sPodName=barbican-db-init-z8rlq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=6dbcde06-aa0c-4b4d-bb5d-60eb5dcc7ec0 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=6dbcde06-aa0c-4b4d-bb5d-60eb5dcc7ec0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fa5ef9cb37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2651 identity=37279 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-db-init-z8rlq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 e12acb6e-2092-4309-8d6d-2396c1d0485e default }" containerID=3dcf8d1842ec237611704475d66416d5e73d532f9d1fcb21e9146b3bde186df8 datapathConfiguration="&{false false false false false }" interface=lxc977df5d5d146 k8sPodName=openstack/barbican-db-sync-dq4qr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3dcf8d1842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-db-sync-dq4qr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3dcf8d1842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c547adac-5cb1-4103-aa78-76f0de1d52db,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=c547adac-5cb1-4103-aa78-76f0de1d52db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-db-sync-dq4qr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c547adac-5cb1-4103-aa78-76f0de1d52db;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=c547adac-5cb1-4103-aa78-76f0de1d52db;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3dcf8d1842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identity=64120 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c547adac-5cb1-4103-aa78-76f0de1d52db,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=c547adac-5cb1-4103-aa78-76f0de1d52db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-db-sync-dq4qr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3dcf8d1842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identity=64120 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-db-sync-dq4qr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3dcf8d1842 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=424 identity=64120 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-db-sync-dq4qr subsys=endpoint level=info msg="Successful endpoint creation" containerID=3dcf8d1842 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=424 identity=64120 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-db-sync-dq4qr subsys=daemon level=info msg="Delete endpoint request" containerID=3dcf8d1842 endpointID=424 k8sNamespace=openstack k8sPodName=barbican-db-sync-dq4qr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c547adac-5cb1-4103-aa78-76f0de1d52db k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=c547adac-5cb1-4103-aa78-76f0de1d52db k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3dcf8d1842 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=424 identity=64120 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-db-sync-dq4qr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 d4d4a43b-fb4a-425a-b3e1-44c43953a8a4 default }" containerID=8e1a6d1f06816d5567e9ecfcad367eac66df3ec8a7ed7ce5c149d22f1deaf52e datapathConfiguration="&{false false false false false }" interface=lxc11cfaefb029d k8sPodName=openstack/barbican-rabbit-init-d94dz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e1a6d1f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1668 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-rabbit-init-d94dz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e1a6d1f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1668 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=18e30432-cb87-46ba-8d71-d5e97dbfa3a4,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=18e30432-cb87-46ba-8d71-d5e97dbfa3a4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-rabbit-init-d94dz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=18e30432-cb87-46ba-8d71-d5e97dbfa3a4;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=18e30432-cb87-46ba-8d71-d5e97dbfa3a4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e1a6d1f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1668 identity=8896 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=18e30432-cb87-46ba-8d71-d5e97dbfa3a4,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=18e30432-cb87-46ba-8d71-d5e97dbfa3a4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-rabbit-init-d94dz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8e1a6d1f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1668 identity=8896 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-rabbit-init-d94dz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e1a6d1f06 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1668 identity=8896 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-rabbit-init-d94dz subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e1a6d1f06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1668 identity=8896 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-rabbit-init-d94dz subsys=daemon level=info msg="Delete endpoint request" containerID=8e1a6d1f06 endpointID=1668 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-d94dz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=18e30432-cb87-46ba-8d71-d5e97dbfa3a4 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=18e30432-cb87-46ba-8d71-d5e97dbfa3a4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8e1a6d1f06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1668 identity=8896 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/barbican-rabbit-init-d94dz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 d3fedee8-e4c4-4118-85df-04b02cc8c981 default }" containerID=86205049255ebdc315f0bd873cecb0731bf0ca749e59f373c88a0ce7ee4fade4 datapathConfiguration="&{false false false false false }" interface=lxc2930404c354c k8sPodName=openstack/barbican-ks-service-jdz8c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8620504925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-ks-service-jdz8c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8620504925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bd834050-979e-49c2-9694-fea66e73e7bd,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=bd834050-979e-49c2-9694-fea66e73e7bd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-ks-service-jdz8c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=bd834050-979e-49c2-9694-fea66e73e7bd;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=bd834050-979e-49c2-9694-fea66e73e7bd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8620504925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=39747 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bd834050-979e-49c2-9694-fea66e73e7bd,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=bd834050-979e-49c2-9694-fea66e73e7bd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-ks-service-jdz8c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8620504925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=39747 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-ks-service-jdz8c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8620504925 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=776 identity=39747 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-ks-service-jdz8c subsys=endpoint level=info msg="Successful endpoint creation" containerID=8620504925 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=776 identity=39747 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-ks-service-jdz8c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8620504925 endpointID=776 k8sNamespace=openstack k8sPodName=barbican-ks-service-jdz8c subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=bd834050-979e-49c2-9694-fea66e73e7bd k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=bd834050-979e-49c2-9694-fea66e73e7bd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8620504925 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=776 identity=39747 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-ks-service-jdz8c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 45a576c9-1788-4363-99c7-bf4c8baff6b0 default }" containerID=a51a8e32a0cf460d5b4bc89abf992b559590fde61ab71372af090e44c0158c95 datapathConfiguration="&{false false false false false }" interface=lxc20d0d4e4d56f k8sPodName=openstack/barbican-ks-endpoints-qxkl2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a51a8e32a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1768 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qxkl2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a51a8e32a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1768 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3ef2bb14-5660-4e52-a710-36ebdcf8392a,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3ef2bb14-5660-4e52-a710-36ebdcf8392a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qxkl2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a51a8e32a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1768 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qxkl2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3ef2bb14-5660-4e52-a710-36ebdcf8392a;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3ef2bb14-5660-4e52-a710-36ebdcf8392a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a51a8e32a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1768 identity=32363 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3ef2bb14-5660-4e52-a710-36ebdcf8392a,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3ef2bb14-5660-4e52-a710-36ebdcf8392a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qxkl2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a51a8e32a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1768 identity=32363 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qxkl2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a51a8e32a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1768 identity=32363 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qxkl2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a51a8e32a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1768 identity=32363 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qxkl2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a51a8e32a0 endpointID=1768 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-qxkl2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3ef2bb14-5660-4e52-a710-36ebdcf8392a k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3ef2bb14-5660-4e52-a710-36ebdcf8392a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a51a8e32a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1768 identity=32363 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qxkl2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 80160eb8-fe22-4f54-b003-edb651751e5f default }" containerID=8caf43fea7dbb6520647cf33646d47aed2442d441c2027894a1a06c1122eb5c8 datapathConfiguration="&{false false false false false }" interface=lxc23c090e0b3b0 k8sPodName=openstack/barbican-ks-user-lfqdv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8caf43fea7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3432 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-user-lfqdv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8caf43fea7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3432 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=000212da-3dfb-438c-a833-fd46719df7f0,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=000212da-3dfb-438c-a833-fd46719df7f0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-user-lfqdv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=000212da-3dfb-438c-a833-fd46719df7f0;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=000212da-3dfb-438c-a833-fd46719df7f0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8caf43fea7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3432 identity=15772 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=000212da-3dfb-438c-a833-fd46719df7f0,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=000212da-3dfb-438c-a833-fd46719df7f0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-user-lfqdv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8caf43fea7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3432 identity=15772 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-user-lfqdv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8caf43fea7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3432 identity=15772 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-user-lfqdv subsys=endpoint level=info msg="Successful endpoint creation" containerID=8caf43fea7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3432 identity=15772 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-user-lfqdv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8caf43fea7 endpointID=3432 k8sNamespace=openstack k8sPodName=barbican-ks-user-lfqdv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=000212da-3dfb-438c-a833-fd46719df7f0 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=000212da-3dfb-438c-a833-fd46719df7f0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8caf43fea7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3432 identity=15772 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-user-lfqdv subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.233 3a3d6a4e-ada8-4790-906e-5e17ad75c728 default }" containerID=446f6dd54f67e3da0bd4651f0aa0a5cd6a90cfc376e1d23e1125df575712e193 datapathConfiguration="&{false false false false false }" interface=lxceee5371ce4c8 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dpj2q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=446f6dd54f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1435 ipv4=10.0.0.233 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dpj2q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=446f6dd54f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1435 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.233 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dpj2q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=446f6dd54f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1435 identity=9123 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.233 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dpj2q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=446f6dd54f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1435 identity=9123 ipv4=10.0.0.233 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dpj2q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=446f6dd54f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1435 identity=9123 ipv4=10.0.0.233 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dpj2q subsys=endpoint level=info msg="Successful endpoint creation" containerID=446f6dd54f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1435 identity=9123 ipv4=10.0.0.233 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dpj2q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.72 ea148df8-8380-4285-95c3-5dfc3f97be9e default }" containerID=3263c508bd4df53cbf28b061cc2eddf2d4f2d530af79d9614c37b40042c5d01f datapathConfiguration="&{false false false false false }" interface=lxcf66df1d6cb92 k8sPodName=openstack/rook-ceph-detect-version-tk28k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3263c508bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3464 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tk28k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3263c508bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3464 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=d8b57667-5692-48a2-836a-e45f05c5af96,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=d8b57667-5692-48a2-836a-e45f05c5af96,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tk28k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=d8b57667-5692-48a2-836a-e45f05c5af96;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=d8b57667-5692-48a2-836a-e45f05c5af96;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3263c508bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3464 identity=12866 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=d8b57667-5692-48a2-836a-e45f05c5af96,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=d8b57667-5692-48a2-836a-e45f05c5af96,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tk28k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3263c508bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3464 identity=12866 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tk28k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3263c508bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3464 identity=12866 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tk28k subsys=endpoint level=info msg="Successful endpoint creation" containerID=3263c508bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3464 identity=12866 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tk28k subsys=daemon level=info msg="Delete endpoint request" containerID=3263c508bd endpointID=3464 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-tk28k subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=d8b57667-5692-48a2-836a-e45f05c5af96 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=d8b57667-5692-48a2-836a-e45f05c5af96 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=3263c508bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3464 identity=12866 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tk28k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 2ff2f9fd-7e20-424d-a44e-a21b19af34b0 default }" containerID=a669ac11d0483c9003e969cf5f5b20631936d809e2273e93fb563cad123d2d52 datapathConfiguration="&{false false false false false }" interface=lxcf43f3b5c4720 k8sPodName=openstack/ceph-object-controller-detect-version-mrzz8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a669ac11d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrzz8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a669ac11d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=84291e7f-1dca-4e92-a1b4-6133656f5b89,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=84291e7f-1dca-4e92-a1b4-6133656f5b89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrzz8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=84291e7f-1dca-4e92-a1b4-6133656f5b89;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=84291e7f-1dca-4e92-a1b4-6133656f5b89;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a669ac11d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identity=29123 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=84291e7f-1dca-4e92-a1b4-6133656f5b89,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=84291e7f-1dca-4e92-a1b4-6133656f5b89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrzz8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a669ac11d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identity=29123 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrzz8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a669ac11d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=54 identity=29123 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrzz8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a669ac11d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=54 identity=29123 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrzz8 subsys=daemon level=info msg="Delete endpoint request" containerID=a669ac11d0 endpointID=54 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-mrzz8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=84291e7f-1dca-4e92-a1b4-6133656f5b89 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=84291e7f-1dca-4e92-a1b4-6133656f5b89 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=a669ac11d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=54 identity=29123 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrzz8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 7eca4341-3772-44f5-9146-3f34b5721973 default }" containerID=9ab4dbeac9f0a280f0f164fa540b7cefdf58ab99a189beb743cb6b92f39e9cc2 datapathConfiguration="&{false false false false false }" interface=lxcfae07a5abe59 k8sPodName=local-path-storage/helper-pod-create-pvc-91515931-4bf0-43ad-88dd-25a778e150f4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ab4dbeac9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=370 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-91515931-4bf0-43ad-88dd-25a778e150f4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ab4dbeac9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=370 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-91515931-4bf0-43ad-88dd-25a778e150f4 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ab4dbeac9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=370 identity=7496 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-91515931-4bf0-43ad-88dd-25a778e150f4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ab4dbeac9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=370 identity=7496 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-91515931-4bf0-43ad-88dd-25a778e150f4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ab4dbeac9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=370 identity=7496 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-91515931-4bf0-43ad-88dd-25a778e150f4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ab4dbeac9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=370 identity=7496 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-91515931-4bf0-43ad-88dd-25a778e150f4 subsys=daemon level=info msg="Delete endpoint request" containerID=9ab4dbeac9 endpointID=370 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-91515931-4bf0-43ad-88dd-25a778e150f4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9ab4dbeac9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=370 identity=7496 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-91515931-4bf0-43ad-88dd-25a778e150f4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 48e8bbe8-d2c8-4d13-99eb-e6229472d790 default }" containerID=d70afb526d7c1bae63365ac839b2b07fa3738fca42f5af269e4f4c2ae69611eb datapathConfiguration="&{false false false false false }" interface=lxc631c84950d15 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d70afb526d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2055 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d70afb526d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2055 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d70afb526d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2055 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d70afb526d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2055 identity=4179 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d70afb526d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2055 identity=4179 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d70afb526d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2055 identity=4179 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d70afb526d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2055 identity=4179 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.18 502db79d-8f38-4ebc-8f2a-2aa79dba7784 default }" containerID=c99b4fd4f335bf7fdaf020c9e681be32d1307289f76e9c96800802f35d2111ef datapathConfiguration="&{false false false false false }" interface=lxc7e1bb913a419 k8sPodName=openstack/glance-db-init-jn5mg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c99b4fd4f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-db-init-jn5mg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c99b4fd4f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=70a5d19b-4c78-497a-bfc7-878c923460e3,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=70a5d19b-4c78-497a-bfc7-878c923460e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-db-init-jn5mg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=70a5d19b-4c78-497a-bfc7-878c923460e3;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=70a5d19b-4c78-497a-bfc7-878c923460e3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c99b4fd4f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=5194 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=70a5d19b-4c78-497a-bfc7-878c923460e3,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=70a5d19b-4c78-497a-bfc7-878c923460e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-db-init-jn5mg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c99b4fd4f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=5194 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-db-init-jn5mg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c99b4fd4f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1152 identity=5194 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-db-init-jn5mg subsys=endpoint level=info msg="Successful endpoint creation" containerID=c99b4fd4f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1152 identity=5194 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-db-init-jn5mg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c99b4fd4f3 endpointID=1152 k8sNamespace=openstack k8sPodName=glance-db-init-jn5mg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=70a5d19b-4c78-497a-bfc7-878c923460e3 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=70a5d19b-4c78-497a-bfc7-878c923460e3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c99b4fd4f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1152 identity=5194 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-db-init-jn5mg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 809f4d65-7fbe-44b4-b22a-12c4a287b0a4 default }" containerID=2c55873362fcfa5afb24689635e2f2080b77ac46aa612a79aee2d2ef6421d293 datapathConfiguration="&{false false false false false }" interface=lxcfa1f9bb89d6a k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ggbhd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c55873362 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ggbhd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c55873362 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ggbhd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c55873362 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identity=54629 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ggbhd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c55873362 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identity=54629 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ggbhd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.207 ceb5aaa7-5076-4107-a6dc-14d380f0c13c default }" containerID=18d4e47bae1c2375c3f78a66ce07d74c0282333e27e98de50d16e4c949947394 datapathConfiguration="&{false false false false false }" interface=lxce24e96e50dfa k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qjfwk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18d4e47bae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=805 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qjfwk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18d4e47bae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=805 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qjfwk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18d4e47bae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=805 identity=29820 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qjfwk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18d4e47bae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=805 identity=29820 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qjfwk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c55873362 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=976 identity=54629 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ggbhd subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c55873362 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=976 identity=54629 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ggbhd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=18d4e47bae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=805 identity=29820 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qjfwk subsys=endpoint level=info msg="Successful endpoint creation" containerID=18d4e47bae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=805 identity=29820 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qjfwk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.74 e65d9a2d-a2c4-480e-81ae-b70f7d748957 default }" containerID=a28c35c7a032aaf92be82105ff7c11747a0d6a5a9e03284e7de6dcf89063c697 datapathConfiguration="&{false false false false false }" interface=lxcfd34fa73ddd2 k8sPodName=openstack/glance-db-sync-dc6zq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a28c35c7a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-db-sync-dc6zq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a28c35c7a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d3cdcffc-10ae-44d2-a1c7-b9ac05d1bde3,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=d3cdcffc-10ae-44d2-a1c7-b9ac05d1bde3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-db-sync-dc6zq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a28c35c7a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-db-sync-dc6zq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d3cdcffc-10ae-44d2-a1c7-b9ac05d1bde3;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=d3cdcffc-10ae-44d2-a1c7-b9ac05d1bde3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a28c35c7a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 identity=28488 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d3cdcffc-10ae-44d2-a1c7-b9ac05d1bde3,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=d3cdcffc-10ae-44d2-a1c7-b9ac05d1bde3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-db-sync-dc6zq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a28c35c7a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 identity=28488 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-db-sync-dc6zq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a28c35c7a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1713 identity=28488 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-db-sync-dc6zq subsys=endpoint level=info msg="Successful endpoint creation" containerID=a28c35c7a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1713 identity=28488 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-db-sync-dc6zq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a28c35c7a0 endpointID=1713 k8sNamespace=openstack k8sPodName=glance-db-sync-dc6zq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d3cdcffc-10ae-44d2-a1c7-b9ac05d1bde3 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=d3cdcffc-10ae-44d2-a1c7-b9ac05d1bde3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a28c35c7a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1713 identity=28488 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-db-sync-dc6zq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 5f4d02d9-c92f-4423-a989-cf25399e220d default }" containerID=97518c71f4ba63e4a049aa1f86b4b45c946511d84420d03a80d196018ade1fde datapathConfiguration="&{false false false false false }" interface=lxce84558c4b32c k8sPodName=openstack/glance-rabbit-init-z2z4r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97518c71f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-rabbit-init-z2z4r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97518c71f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1a8b795f-85c5-438d-ab1e-f456c542f28d,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1a8b795f-85c5-438d-ab1e-f456c542f28d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-rabbit-init-z2z4r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=97518c71f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-rabbit-init-z2z4r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1a8b795f-85c5-438d-ab1e-f456c542f28d;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1a8b795f-85c5-438d-ab1e-f456c542f28d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97518c71f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identity=1486 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1a8b795f-85c5-438d-ab1e-f456c542f28d,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1a8b795f-85c5-438d-ab1e-f456c542f28d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-rabbit-init-z2z4r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97518c71f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identity=1486 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-rabbit-init-z2z4r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=97518c71f4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=198 identity=1486 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-rabbit-init-z2z4r subsys=endpoint level=info msg="Successful endpoint creation" containerID=97518c71f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=198 identity=1486 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-rabbit-init-z2z4r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=97518c71f4 endpointID=198 k8sNamespace=openstack k8sPodName=glance-rabbit-init-z2z4r subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1a8b795f-85c5-438d-ab1e-f456c542f28d k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1a8b795f-85c5-438d-ab1e-f456c542f28d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=97518c71f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=198 identity=1486 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-rabbit-init-z2z4r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 e13fb1eb-548e-4fcc-9dcc-91b95634fbcb default }" containerID=5ca74012a7b48599894b5e497a8d47b10277311e7c4547bbb0c2e1cbb2172531 datapathConfiguration="&{false false false false false }" interface=lxc91929d740c71 k8sPodName=openstack/glance-ks-service-2gf9h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ca74012a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1562 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-ks-service-2gf9h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ca74012a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1562 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6ae52090-b295-4a1e-a033-973a687ad62b,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=6ae52090-b295-4a1e-a033-973a687ad62b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-ks-service-2gf9h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6ae52090-b295-4a1e-a033-973a687ad62b;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=6ae52090-b295-4a1e-a033-973a687ad62b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ca74012a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1562 identity=62182 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6ae52090-b295-4a1e-a033-973a687ad62b,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=6ae52090-b295-4a1e-a033-973a687ad62b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-ks-service-2gf9h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ca74012a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1562 identity=62182 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-ks-service-2gf9h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5ca74012a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1562 identity=62182 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-ks-service-2gf9h subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ca74012a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1562 identity=62182 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-ks-service-2gf9h subsys=daemon level=info msg="Delete endpoint request" containerID=5ca74012a7 endpointID=1562 k8sNamespace=openstack k8sPodName=glance-ks-service-2gf9h subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6ae52090-b295-4a1e-a033-973a687ad62b k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=6ae52090-b295-4a1e-a033-973a687ad62b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5ca74012a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1562 identity=62182 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-ks-service-2gf9h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 2d6700f9-8b8a-46e2-9867-e328afb6c4a5 default }" containerID=ade34eb661bcb987a04f52bfb5145e648d8476caa6721dc92ffa56f9029ac095 datapathConfiguration="&{false false false false false }" interface=lxcdf7147ab0fd4 k8sPodName=openstack/glance-ks-endpoints-kp2fg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ade34eb661 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-kp2fg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ade34eb661 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=80887b5a-9658-4016-ba69-103f704f17e0,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=80887b5a-9658-4016-ba69-103f704f17e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-kp2fg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=80887b5a-9658-4016-ba69-103f704f17e0;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=80887b5a-9658-4016-ba69-103f704f17e0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ade34eb661 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identity=7054 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=80887b5a-9658-4016-ba69-103f704f17e0,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=80887b5a-9658-4016-ba69-103f704f17e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-kp2fg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ade34eb661 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identity=7054 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-kp2fg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ade34eb661 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=867 identity=7054 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-kp2fg subsys=endpoint level=info msg="Successful endpoint creation" containerID=ade34eb661 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=867 identity=7054 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-kp2fg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ade34eb661 endpointID=867 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-kp2fg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=80887b5a-9658-4016-ba69-103f704f17e0 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=80887b5a-9658-4016-ba69-103f704f17e0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ade34eb661 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=867 identity=7054 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-kp2fg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 e55fb1ca-e1b0-487e-9912-0aac30dd1bc0 default }" containerID=13d8ffb96b0e4adfdb19a9ae5b42a3234fe8c0d2f17e8cd5007bfdc21f3d3079 datapathConfiguration="&{false false false false false }" interface=lxc7d5452eb439b k8sPodName=openstack/glance-ks-user-4ks6z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13d8ffb96b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-user-4ks6z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13d8ffb96b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=665a81bf-b4fe-4944-82ed-8111fe344b84,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=665a81bf-b4fe-4944-82ed-8111fe344b84,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-user-4ks6z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=665a81bf-b4fe-4944-82ed-8111fe344b84;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=665a81bf-b4fe-4944-82ed-8111fe344b84;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13d8ffb96b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identity=28462 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=665a81bf-b4fe-4944-82ed-8111fe344b84,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=665a81bf-b4fe-4944-82ed-8111fe344b84,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-user-4ks6z oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=13d8ffb96b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identity=28462 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-user-4ks6z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=13d8ffb96b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=7 identity=28462 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-user-4ks6z subsys=endpoint level=info msg="Successful endpoint creation" containerID=13d8ffb96b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=7 identity=28462 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-user-4ks6z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=13d8ffb96b endpointID=7 k8sNamespace=openstack k8sPodName=glance-ks-user-4ks6z subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=665a81bf-b4fe-4944-82ed-8111fe344b84 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=665a81bf-b4fe-4944-82ed-8111fe344b84 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=13d8ffb96b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=7 identity=28462 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-user-4ks6z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 2923b751-8942-44e9-9143-b19397cfaccc default }" containerID=cb98078e54733d0a8bc6c90a9380965d678624f16cedf33adc4a54f653eaf847 datapathConfiguration="&{false false false false false }" interface=lxc5441a5e1bcfa k8sPodName=openstack/glance-metadefs-load-xdn7m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb98078e54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-metadefs-load-xdn7m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb98078e54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c15960be-40db-4112-beb1-2ba4c514e864,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=c15960be-40db-4112-beb1-2ba4c514e864,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-metadefs-load-xdn7m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c15960be-40db-4112-beb1-2ba4c514e864;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=c15960be-40db-4112-beb1-2ba4c514e864;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb98078e54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 identity=11411 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c15960be-40db-4112-beb1-2ba4c514e864,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=c15960be-40db-4112-beb1-2ba4c514e864,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-metadefs-load-xdn7m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb98078e54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 identity=11411 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-metadefs-load-xdn7m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb98078e54 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1591 identity=11411 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-metadefs-load-xdn7m subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb98078e54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1591 identity=11411 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-metadefs-load-xdn7m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cb98078e54 endpointID=1591 k8sNamespace=openstack k8sPodName=glance-metadefs-load-xdn7m subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c15960be-40db-4112-beb1-2ba4c514e864 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=c15960be-40db-4112-beb1-2ba4c514e864 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=cb98078e54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1591 identity=11411 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-metadefs-load-xdn7m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 bc849df7-901c-4b53-a160-d0fec6cae43d default }" containerID=0e42e3d2a1c108d5dd13d80a549b6c57160a87c54af65ee4e1da683e0a7a0919 datapathConfiguration="&{false false false false false }" interface=lxc5b5b002c89c5 k8sPodName=openstack/glance-storage-init-8r2np labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e42e3d2a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1418 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-storage-init-8r2np subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e42e3d2a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1418 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=52de41b8-7d25-4564-bc19-da4ed8b124a2,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=52de41b8-7d25-4564-bc19-da4ed8b124a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-storage-init-8r2np subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=52de41b8-7d25-4564-bc19-da4ed8b124a2;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=52de41b8-7d25-4564-bc19-da4ed8b124a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e42e3d2a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1418 identity=7544 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=52de41b8-7d25-4564-bc19-da4ed8b124a2,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=52de41b8-7d25-4564-bc19-da4ed8b124a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-storage-init-8r2np oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e42e3d2a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1418 identity=7544 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-storage-init-8r2np subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e42e3d2a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1418 identity=7544 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-storage-init-8r2np subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e42e3d2a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1418 identity=7544 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-storage-init-8r2np subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0e42e3d2a1 endpointID=1418 k8sNamespace=openstack k8sPodName=glance-storage-init-8r2np subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=52de41b8-7d25-4564-bc19-da4ed8b124a2 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=52de41b8-7d25-4564-bc19-da4ed8b124a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0e42e3d2a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1418 identity=7544 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-storage-init-8r2np subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 29aa98e9-e537-4032-827f-52b429f70138 default }" containerID=1213b66d7275961fbbaa33af3014a6cae7cbf42c120aa2d4fe44a19ca8711660 datapathConfiguration="&{false false false false false }" interface=lxcdcabf04821cb k8sPodName=openstack/glance-api-865c46f7d4-jhqkd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1213b66d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3110 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-api-865c46f7d4-jhqkd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1213b66d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3110 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-api-865c46f7d4-jhqkd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1213b66d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3110 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-api-865c46f7d4-jhqkd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1213b66d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3110 identity=3437 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-api-865c46f7d4-jhqkd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1213b66d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3110 identity=3437 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-api-865c46f7d4-jhqkd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1213b66d72 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3110 identity=3437 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-api-865c46f7d4-jhqkd subsys=endpoint level=info msg="Successful endpoint creation" containerID=1213b66d72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3110 identity=3437 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-api-865c46f7d4-jhqkd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.211 3e370f64-49e2-4eb1-8f9e-b808335c553b default }" containerID=3bfbb21469e4f67fe141f4af452080a884f2853216d9bd2dd7b91102685165b5 datapathConfiguration="&{false false false false false }" interface=lxc489ff1ee6dd0 k8sPodName=openstack/staffeln-conductor-85d48f7b94-jdxdc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bfbb21469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/staffeln-conductor-85d48f7b94-jdxdc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bfbb21469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/staffeln-conductor-85d48f7b94-jdxdc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bfbb21469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 identity=60784 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/staffeln-conductor-85d48f7b94-jdxdc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bfbb21469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 identity=60784 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/staffeln-conductor-85d48f7b94-jdxdc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 ee5c06f0-c284-4350-888d-7adfe4b50294 default }" containerID=d5904019c3a05d850713cd805cd72eadc681dd1a35d7369687c2ffabc370ba47 datapathConfiguration="&{false false false false false }" interface=lxc53e988d316c1 k8sPodName=openstack/staffeln-api-56f8c5bc5c-kv4bw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5904019c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-api-56f8c5bc5c-kv4bw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5904019c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-api-56f8c5bc5c-kv4bw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5904019c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identity=8092 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-api-56f8c5bc5c-kv4bw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5904019c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identity=8092 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-api-56f8c5bc5c-kv4bw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3bfbb21469 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2767 identity=60784 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/staffeln-conductor-85d48f7b94-jdxdc subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bfbb21469 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2767 identity=60784 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/staffeln-conductor-85d48f7b94-jdxdc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.21 b80655c9-29b1-45e5-a535-5bfa7f4aee39 default }" containerID=07581101f08c2cf64c08c79107b1e0a0fc4f8c1700990c8235b451fc6cf0004f datapathConfiguration="&{false false false false false }" interface=lxc6ec5c8f985ea k8sPodName=openstack/staffeln-db-init-qk7hl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07581101f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/staffeln-db-init-qk7hl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07581101f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8aeec8d9-e64d-4301-a6f3-d4301dd30914,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=8aeec8d9-e64d-4301-a6f3-d4301dd30914,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/staffeln-db-init-qk7hl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=8aeec8d9-e64d-4301-a6f3-d4301dd30914;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=8aeec8d9-e64d-4301-a6f3-d4301dd30914;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=07581101f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identity=55684 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8aeec8d9-e64d-4301-a6f3-d4301dd30914,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=8aeec8d9-e64d-4301-a6f3-d4301dd30914,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/staffeln-db-init-qk7hl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07581101f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identity=55684 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/staffeln-db-init-qk7hl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d5904019c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=913 identity=8092 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-api-56f8c5bc5c-kv4bw subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5904019c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=913 identity=8092 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-api-56f8c5bc5c-kv4bw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=07581101f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=182 identity=55684 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/staffeln-db-init-qk7hl subsys=endpoint level=info msg="Successful endpoint creation" containerID=07581101f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=182 identity=55684 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/staffeln-db-init-qk7hl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=07581101f0 endpointID=182 k8sNamespace=openstack k8sPodName=staffeln-db-init-qk7hl subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=8aeec8d9-e64d-4301-a6f3-d4301dd30914 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=8aeec8d9-e64d-4301-a6f3-d4301dd30914 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=07581101f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=182 identity=55684 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/staffeln-db-init-qk7hl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 3ced38ba-17b6-46f0-b6b0-49dc3b0fede7 default }" containerID=e4ebedffca215dc7afe56c1f8465e48bde627921e6461a34bbd51aee0d90ac57 datapathConfiguration="&{false false false false false }" interface=lxcca40c9a6b0f4 k8sPodName=openstack/staffeln-db-sync-l44rz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4ebedffca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/staffeln-db-sync-l44rz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4ebedffca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=ec75ec2c-9c06-43b5-ae06-5e82505122de,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=ec75ec2c-9c06-43b5-ae06-5e82505122de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/staffeln-db-sync-l44rz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e4ebedffca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.110 ipv6= k8sPodName=openstack/staffeln-db-sync-l44rz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=ec75ec2c-9c06-43b5-ae06-5e82505122de;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=ec75ec2c-9c06-43b5-ae06-5e82505122de;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4ebedffca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identity=27733 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=ec75ec2c-9c06-43b5-ae06-5e82505122de,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=ec75ec2c-9c06-43b5-ae06-5e82505122de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/staffeln-db-sync-l44rz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4ebedffca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identity=27733 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/staffeln-db-sync-l44rz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4ebedffca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2631 identity=27733 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/staffeln-db-sync-l44rz subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4ebedffca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2631 identity=27733 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/staffeln-db-sync-l44rz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager