level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="807.446µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="41.46µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.196665ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="27.031µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=103.082174ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.94µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="20.601µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="82.822µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="75.232µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="135.763µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="587.413µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="3.16µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.882787ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.575689ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="45.381µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="54.081µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="381.819µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="132.672µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="79.302µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=49.481539ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="77.141µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.72µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.250.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.800918ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="6.72µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.448439ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.408697ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="11.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.31µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.66µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.09µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="13.51µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="28.82µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="13.47µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="68.611µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="325.356µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.581µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="219.584µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="873.839µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.321538ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.2µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="22.741µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.250 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.250 ipAddr.ipv6="" k8sNodeIP=199.204.45.250 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.250" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.186" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.250" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.250} {CiliumInternalIP 10.0.0.186}] 10.0.0.0/24 [] [] 10.0.0.72 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:41125" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.653370588s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="16.111µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="10.73µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Start hook executed" duration="62.791µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="6.731µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3919 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3919 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3919 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.724541161s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=291.856619ms file-path=/var/run/cilium/state/templates/6478dddefd5e4c3bbaaa816ed77836f0ed2b996e2608f2c7fda27629b7854f7a/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3919 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 ipv4=10.0.0.72 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identityLabels="reserved:health" ipv4=10.0.0.72 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identity=4 identityLabels="reserved:health" ipv4=10.0.0.72 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.072260034s file-path=/var/run/cilium/state/templates/b57e224b43303d0cc7c65445732bfaf563105d826d96d6e856c826416ca3c9a8/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=715 identity=4 ipv4=10.0.0.72 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 a596aecb-a032-44f3-bcc1-cf77344f0727 default }" containerID=6791d34989eddd0c52f4c993e5044a8836c1a7969f3837494442539a551fdaa8 datapathConfiguration="&{false false false false false }" interface=lxc3882d770cda3 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jv9qn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6791d34989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3234 ipv4=10.0.0.144 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jv9qn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6791d34989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3234 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=594853cb-ccaa-4ad9-b454-7611b760f036,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=594853cb-ccaa-4ad9-b454-7611b760f036,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.144 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jv9qn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.210 eeee5153-764b-46f5-8ac3-3a743a1e89fe default }" containerID=6b462e57e98850479b12818a42f57b632f86c7eae3000154f533c5c088e277f2 datapathConfiguration="&{false false false false false }" interface=lxcc1db3b380507 k8sPodName=kube-system/coredns-7c96b6546b-c95fw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b462e57e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-c95fw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b462e57e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-c95fw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6b462e57e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-c95fw line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=6791d34989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3234 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.144 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jv9qn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=594853cb-ccaa-4ad9-b454-7611b760f036;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=594853cb-ccaa-4ad9-b454-7611b760f036;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6791d34989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3234 identity=54818 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=594853cb-ccaa-4ad9-b454-7611b760f036,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=594853cb-ccaa-4ad9-b454-7611b760f036,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.144 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jv9qn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6791d34989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3234 identity=54818 ipv4=10.0.0.144 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jv9qn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b462e57e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=10937 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-c95fw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b462e57e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=10937 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-c95fw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6791d34989 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3234 identity=54818 ipv4=10.0.0.144 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jv9qn subsys=endpoint level=info msg="Successful endpoint creation" containerID=6791d34989 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3234 identity=54818 ipv4=10.0.0.144 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jv9qn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6b462e57e9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=449 identity=10937 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-c95fw subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b462e57e9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=449 identity=10937 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-c95fw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6791d34989 endpointID=3234 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-jv9qn subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=594853cb-ccaa-4ad9-b454-7611b760f036 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=594853cb-ccaa-4ad9-b454-7611b760f036 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=6791d34989 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3234 identity=54818 ipv4=10.0.0.144 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jv9qn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 097b4ece-a0eb-4f85-bfc6-b2c3c6f7484d default }" containerID=2a16db3d5bc3b21d2281eda9a202fc34346c7490d8117decc152547799c47d37 datapathConfiguration="&{false false false false false }" interface=lxcd33bfa8cd7f7 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bzqfc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a16db3d5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 ipv4=10.0.0.248 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bzqfc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a16db3d5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.248 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bzqfc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2a16db3d5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.248 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bzqfc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a16db3d5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identity=19157 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.248 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bzqfc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a16db3d5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identity=19157 ipv4=10.0.0.248 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bzqfc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a16db3d5b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=786 identity=19157 ipv4=10.0.0.248 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bzqfc subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a16db3d5b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=786 identity=19157 ipv4=10.0.0.248 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bzqfc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3919 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03919 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03919 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03919 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03919:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3919 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 a9e38ac8-f31b-45e9-803d-5a26b84e23e2 default }" containerID=1996650462229ded3bcf11a69a99262fc10e6da0b2c7a5a234fa41ce4d4b53c0 datapathConfiguration="&{false false false false false }" interface=lxc8616fe442cd3 k8sPodName=kube-system/coredns-67659f764b-26fph labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1996650462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2285 ipv4=10.0.0.8 ipv6= k8sPodName=kube-system/coredns-67659f764b-26fph subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1996650462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2285 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.8 ipv6= k8sPodName=kube-system/coredns-67659f764b-26fph subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1996650462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2285 identity=10937 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.8 ipv6= k8sPodName=kube-system/coredns-67659f764b-26fph oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1996650462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2285 identity=10937 ipv4=10.0.0.8 ipv6= k8sPodName=kube-system/coredns-67659f764b-26fph subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 456522e0-9b8b-4a3c-a3be-0fc988a39da3 default }" containerID=b365789cef15b5023d3866ed137d1125d37e6b752da6255a040d7994a293f276 datapathConfiguration="&{false false false false false }" interface=lxc1abea7284c0e k8sPodName=kube-system/coredns-67659f764b-nljj7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b365789cef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3106 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-nljj7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b365789cef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3106 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-nljj7 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b365789cef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3106 identity=10937 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-nljj7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b365789cef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3106 identity=10937 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-nljj7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1996650462 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2285 identity=10937 ipv4=10.0.0.8 ipv6= k8sPodName=kube-system/coredns-67659f764b-26fph subsys=endpoint level=info msg="Successful endpoint creation" containerID=1996650462 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2285 identity=10937 ipv4=10.0.0.8 ipv6= k8sPodName=kube-system/coredns-67659f764b-26fph subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b365789cef datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3106 identity=10937 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-nljj7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b365789cef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3106 identity=10937 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-nljj7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.106 4e75af4d-75d6-4e0d-8945-95c9225c6a4a default }" containerID=d1d21b6f46a5169251cd4a7e786613d99a61bec9c32149422eb3b5cf7600445b datapathConfiguration="&{false false false false false }" interface=lxc1a9cba8c09be k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wplxr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1d21b6f46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2806 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wplxr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1d21b6f46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2806 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wplxr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d1d21b6f46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2806 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wplxr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d1d21b6f46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2806 identity=21491 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wplxr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1d21b6f46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2806 identity=21491 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wplxr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1d21b6f46 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2806 identity=21491 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wplxr subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1d21b6f46 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2806 identity=21491 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wplxr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6b462e57e9 endpointID=449 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-c95fw subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=6b462e57e9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=449 identity=10937 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-c95fw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 8df80756-3078-4067-81e6-cbcd0a3b57df default }" containerID=ca7b107732ff406e4e5a84e7dd8826d37ee531bf8c7aeff8c78a3e0be6779a9f datapathConfiguration="&{false false false false false }" interface=lxca9b70d46fcb0 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kfr7t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca7b107732 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kfr7t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca7b107732 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kfr7t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ca7b107732 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kfr7t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca7b107732 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 identity=5107 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kfr7t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca7b107732 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 identity=5107 ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kfr7t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 bb120fe3-90df-43f0-bea7-c7c6133fe205 default }" containerID=671e03006604d5554284397468c23fa45f3fb125b7f7fbb376ab839751ece33b datapathConfiguration="&{false false false false false }" interface=lxc296992c1e510 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7d9br labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=671e030066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2271 ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7d9br subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=671e030066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2271 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7d9br subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.68 03a042ec-7fa7-4853-a8eb-f93ca3340c94 default }" containerID=0185a1afb58bf17f89cc76f37efcc9c271452ee6f7f1df5ec5e399c1e6b1559c datapathConfiguration="&{false false false false false }" interface=lxc05352948fdd7 k8sPodName=cert-manager/cert-manager-75c4c745bc-4mpqv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0185a1afb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4mpqv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0185a1afb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4mpqv subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=671e030066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2271 identity=34533 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7d9br oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=671e030066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2271 identity=34533 ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7d9br subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0185a1afb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 identity=9394 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4mpqv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0185a1afb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 identity=9394 ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4mpqv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca7b107732 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=623 identity=5107 ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kfr7t subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca7b107732 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=623 identity=5107 ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kfr7t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=671e030066 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2271 identity=34533 ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7d9br subsys=endpoint level=info msg="Successful endpoint creation" containerID=671e030066 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2271 identity=34533 ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7d9br subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0185a1afb5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=833 identity=9394 ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4mpqv subsys=endpoint level=info msg="Successful endpoint creation" containerID=0185a1afb5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=833 identity=9394 ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4mpqv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.126 293cfee5-a507-43cb-86fb-5fde172847d2 default }" containerID=f29d23fe2060967d78287c80c00c83775ae2e9e9dc1b0a96e6fb4d59be8f7c00 datapathConfiguration="&{false false false false false }" interface=lxc38424c0a88cb k8sPodName=cert-manager/cert-manager-startupapicheck-qg8pq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f29d23fe20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qg8pq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f29d23fe20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=3822e917-8ca6-4143-adf4-eb576b2d5d3b,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=3822e917-8ca6-4143-adf4-eb576b2d5d3b,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qg8pq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=3822e917-8ca6-4143-adf4-eb576b2d5d3b;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=3822e917-8ca6-4143-adf4-eb576b2d5d3b;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f29d23fe20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=394 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=3822e917-8ca6-4143-adf4-eb576b2d5d3b,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=3822e917-8ca6-4143-adf4-eb576b2d5d3b,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qg8pq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f29d23fe20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=394 ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qg8pq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f29d23fe20 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=660 identity=394 ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qg8pq subsys=endpoint level=info msg="Successful endpoint creation" containerID=f29d23fe20 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=660 identity=394 ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qg8pq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f29d23fe20 endpointID=660 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-qg8pq subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=3822e917-8ca6-4143-adf4-eb576b2d5d3b k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=3822e917-8ca6-4143-adf4-eb576b2d5d3b k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=f29d23fe20 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=660 identity=394 ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-qg8pq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 4c9c743e-aaa5-4aab-92dd-c0ea9f74096a default }" containerID=736817baa8140d959f5f37e75ecf796c24436434f85061b71362a403e418a33c datapathConfiguration="&{false false false false false }" interface=lxce2c1bb543900 k8sPodName=ingress-nginx/ingress-nginx-admission-create-fp6vs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=736817baa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2840 ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fp6vs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=736817baa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2840 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=cfa65843-d316-4eb2-b767-d8c18cde3c1c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=cfa65843-d316-4eb2-b767-d8c18cde3c1c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fp6vs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=cfa65843-d316-4eb2-b767-d8c18cde3c1c;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=cfa65843-d316-4eb2-b767-d8c18cde3c1c;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=736817baa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2840 identity=7683 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=cfa65843-d316-4eb2-b767-d8c18cde3c1c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=cfa65843-d316-4eb2-b767-d8c18cde3c1c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fp6vs oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=736817baa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2840 identity=7683 ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fp6vs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=736817baa8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2840 identity=7683 ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fp6vs subsys=endpoint level=info msg="Successful endpoint creation" containerID=736817baa8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2840 identity=7683 ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fp6vs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=736817baa8 endpointID=2840 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-fp6vs subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=cfa65843-d316-4eb2-b767-d8c18cde3c1c k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=cfa65843-d316-4eb2-b767-d8c18cde3c1c k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=736817baa8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2840 identity=7683 ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fp6vs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 0455c143-5a58-4534-8e02-df485b429231 default }" containerID=7b6e2f066149112b583f741aadcc8883bf443fe38243d288d17c22a0dd446885 datapathConfiguration="&{false false false false false }" interface=lxc50eba16d5ec8 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mrrdh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b6e2f0661 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mrrdh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b6e2f0661 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mrrdh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b6e2f0661 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 identity=21844 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mrrdh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b6e2f0661 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 identity=21844 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mrrdh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7b6e2f0661 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1321 identity=21844 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mrrdh subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b6e2f0661 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1321 identity=21844 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mrrdh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.107 efd96b6f-1a16-4b89-9088-7eed823e188d default }" containerID=1f5b13e6d119b15cf8b03c96b30f735cb65e722137e2a2e70c87ecaec720ca9c datapathConfiguration="&{false false false false false }" interface=lxc300b8b60951b k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6vfnw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f5b13e6d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6vfnw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f5b13e6d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=fb199b2f-51e1-4dca-a020-41623fff9515,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=fb199b2f-51e1-4dca-a020-41623fff9515,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6vfnw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=fb199b2f-51e1-4dca-a020-41623fff9515;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=fb199b2f-51e1-4dca-a020-41623fff9515;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f5b13e6d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identity=24057 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=fb199b2f-51e1-4dca-a020-41623fff9515,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=fb199b2f-51e1-4dca-a020-41623fff9515,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6vfnw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f5b13e6d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1103 identity=24057 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6vfnw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f5b13e6d1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1103 identity=24057 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6vfnw subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f5b13e6d1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1103 identity=24057 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6vfnw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1f5b13e6d1 endpointID=1103 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-6vfnw subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=fb199b2f-51e1-4dca-a020-41623fff9515 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=fb199b2f-51e1-4dca-a020-41623fff9515 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=1f5b13e6d1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1103 identity=24057 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6vfnw subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=762bb793-e16a-42bb-8dc4-af04f43bf8cd] Description:}]" policyAddRequest=039c5a71-cb07-4faf-bbd7-a04dd340bfab subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=039c5a71-cb07-4faf-bbd7-a04dd340bfab policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=c333ee27-642b-4509-99df-38cb2b02044a] Description:}]" policyAddRequest=539b57b7-8d21-49c3-b5f2-960babc31e01 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=539b57b7-8d21-49c3-b5f2-960babc31e01 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.60 ee88e974-d499-4198-89e5-b071486a04d0 default }" containerID=f3515476db6f625279d6b39adea71dc13aad039d90152de4e4764e522409355c datapathConfiguration="&{false false false false false }" interface=lxc8eeffae28174 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-g596d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3515476db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=225 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-g596d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3515476db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=225 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-g596d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3515476db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=225 identity=10068 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-g596d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3515476db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=225 identity=10068 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-g596d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f3515476db datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=225 identity=10068 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-g596d subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3515476db datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=225 identity=10068 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-g596d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.187 63db5d47-de13-48dd-91be-659f1a4a50a9 default }" containerID=4a192a76c3372a7cda83c7b6301f819c9691d4ab52a5c38af0ba27b00c74eb4e datapathConfiguration="&{false false false false false }" interface=lxc3efad151aa43 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-fd6n9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a192a76c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1705 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-fd6n9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a192a76c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1705 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-fd6n9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a192a76c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1705 identity=29196 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-fd6n9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a192a76c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1705 identity=29196 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-fd6n9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a192a76c3 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1705 identity=29196 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-fd6n9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a192a76c3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1705 identity=29196 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-fd6n9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.74 51a4e4da-f2c8-4ded-ac34-e46bc0769e4f default }" containerID=84cbfc542facef8c4a33f3fd3b4d13f964a0e70fb297cc0358f762e7f64ce9d8 datapathConfiguration="&{false false false false false }" interface=lxc92ed195b6c62 k8sPodName=openstack/pxc-operator-69cb5bbdb9-q5lfx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84cbfc542f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-q5lfx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84cbfc542f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-q5lfx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=84cbfc542f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.74 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-q5lfx line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=84cbfc542f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identity=7279 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-q5lfx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84cbfc542f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identity=7279 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-q5lfx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=84cbfc542f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=990 identity=7279 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-q5lfx subsys=endpoint level=info msg="Successful endpoint creation" containerID=84cbfc542f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=990 identity=7279 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-q5lfx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.195 fb5f27dd-d0e4-4d49-bf83-a072f1d30eb3 default }" containerID=b826566e3f3f5299e82da07cb53e3f23c2a9d21117bf26d91f352395d28e8aa1 datapathConfiguration="&{false false false false false }" interface=lxcd5e00d0fe710 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b826566e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b826566e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b826566e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 identity=1115 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b826566e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 identity=1115 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b826566e3f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1136 identity=1115 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b826566e3f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1136 identity=1115 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.146 1106fd0f-e06d-450d-9d68-0f2feb2dedae default }" containerID=ce99a7e7902dcd73aae52a683e8aece17344c266b8afe92db79de5fc7b2bd7cb datapathConfiguration="&{false false false false false }" interface=lxcd71e585d1e08 k8sPodName=local-path-storage/helper-pod-create-pvc-ec12a58f-8481-4d5d-9386-56a9fcb4b1bf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce99a7e790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1509 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec12a58f-8481-4d5d-9386-56a9fcb4b1bf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce99a7e790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1509 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec12a58f-8481-4d5d-9386-56a9fcb4b1bf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce99a7e790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1509 identity=2382 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec12a58f-8481-4d5d-9386-56a9fcb4b1bf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce99a7e790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1509 identity=2382 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec12a58f-8481-4d5d-9386-56a9fcb4b1bf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce99a7e790 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1509 identity=2382 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec12a58f-8481-4d5d-9386-56a9fcb4b1bf subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce99a7e790 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1509 identity=2382 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec12a58f-8481-4d5d-9386-56a9fcb4b1bf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ce99a7e790 endpointID=1509 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ec12a58f-8481-4d5d-9386-56a9fcb4b1bf subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ce99a7e790 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1509 identity=2382 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec12a58f-8481-4d5d-9386-56a9fcb4b1bf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 42afbf85-cb61-4423-8382-c78f13cb43f3 default }" containerID=bedc7aa96e87245f63aeb8c11bcd2d30c43b70a75e7a700996f9b0c8c06fb419 datapathConfiguration="&{false false false false false }" interface=lxcb74cca29731f k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bedc7aa96e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bedc7aa96e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bedc7aa96e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 identity=13647 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bedc7aa96e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 identity=13647 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bedc7aa96e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1133 identity=13647 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bedc7aa96e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1133 identity=13647 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=7b82949d-44a1-441a-afd5-fe28d51b8104] Description:}]" policyAddRequest=439450e7-ea77-4ce2-a79c-b3c0d553abae subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=439450e7-ea77-4ce2-a79c-b3c0d553abae policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.65 e56b6e38-513c-4a57-b1c7-1d04baca8888 default }" containerID=3452ab14df63b059aef1edde7406926018c18911ee04c2043fe4a75d3ecaa31b datapathConfiguration="&{false false false false false }" interface=lxc12312302eac5 k8sPodName=local-path-storage/helper-pod-create-pvc-30b4275c-e954-4f0f-ae01-7dd1ebd6e9da labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3452ab14df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b4275c-e954-4f0f-ae01-7dd1ebd6e9da subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3452ab14df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b4275c-e954-4f0f-ae01-7dd1ebd6e9da subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3452ab14df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=2382 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b4275c-e954-4f0f-ae01-7dd1ebd6e9da oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3452ab14df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=2382 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b4275c-e954-4f0f-ae01-7dd1ebd6e9da subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3452ab14df datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=453 identity=2382 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b4275c-e954-4f0f-ae01-7dd1ebd6e9da subsys=endpoint level=info msg="Successful endpoint creation" containerID=3452ab14df datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=453 identity=2382 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b4275c-e954-4f0f-ae01-7dd1ebd6e9da subsys=daemon level=info msg="Delete endpoint request" containerID=3452ab14df endpointID=453 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-30b4275c-e954-4f0f-ae01-7dd1ebd6e9da subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3452ab14df datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=453 identity=2382 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30b4275c-e954-4f0f-ae01-7dd1ebd6e9da subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 7b7466e7-2f67-42cc-9def-93c029a57190 default }" containerID=39153a6185ce24145dcbe8ee862d3f0aff98a861f0846f05bd59e8eb66a51ac8 datapathConfiguration="&{false false false false false }" interface=lxcb4a9d8aa4dbd k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39153a6185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39153a6185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39153a6185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 identity=39727 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39153a6185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 identity=39727 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=39153a6185 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2124 identity=39727 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=39153a6185 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2124 identity=39727 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=ef13363d-43f0-4181-9443-b95c30f45468] Description:}]" policyAddRequest=d39b02a8-da6c-42bc-a666-d6a40eb3eeec subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d39b02a8-da6c-42bc-a666-d6a40eb3eeec policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.213 279748ff-5fc8-4056-838c-0d25f6b76af0 default }" containerID=5a10844dbb9867c753d6b7c470e99a375293d862de0b305208378ddae04b952d datapathConfiguration="&{false false false false false }" interface=lxc7f1766844d83 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a10844dbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2717 ipv4=10.0.0.213 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a10844dbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2717 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.213 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a10844dbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2717 identity=1792 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.213 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a10844dbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2717 identity=1792 ipv4=10.0.0.213 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a10844dbb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2717 identity=1792 ipv4=10.0.0.213 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a10844dbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2717 identity=1792 ipv4=10.0.0.213 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009292951154517294 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.233 ff86c91b-f774-4e8a-a1bd-35c188119c6b default }" containerID=766f953c59e3d0485e2b4162d316e43910168a7a2c726642003e7752e4a61c57 datapathConfiguration="&{false false false false false }" interface=lxcaabd8e230804 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wvkw5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=766f953c59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1717 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wvkw5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=766f953c59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1717 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wvkw5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=766f953c59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1717 identity=1777 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wvkw5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=766f953c59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1717 identity=1777 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wvkw5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.236 c3071fd6-a30f-4537-9765-230e0d8b3671 default }" containerID=6f6c490ca6641be1648727d3c9b53515ed59aa5b55a48af99fac0b9490e106d3 datapathConfiguration="&{false false false false false }" interface=lxc38f6ae27d304 k8sPodName=monitoring/node-feature-discovery-worker-2zk66 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f6c490ca6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3400 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-2zk66 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f6c490ca6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3400 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-2zk66 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f6c490ca6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3400 identity=56150 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-2zk66 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f6c490ca6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3400 identity=56150 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-2zk66 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=766f953c59 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1717 identity=1777 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wvkw5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=766f953c59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1717 identity=1777 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wvkw5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6f6c490ca6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3400 identity=56150 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-2zk66 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f6c490ca6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3400 identity=56150 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-2zk66 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.196 24da718e-14c1-413f-8daa-5a66c5b9b4c7 default }" containerID=c1ffab11ca1d4129f218dfba7364956facca3a1c9afd91e2b8f6ab47e5223338 datapathConfiguration="&{false false false false false }" interface=lxc769d16144949 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-dngjq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1ffab11ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-dngjq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1ffab11ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-dngjq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1ffab11ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 identity=40503 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-dngjq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1ffab11ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 identity=40503 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-dngjq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1ffab11ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=511 identity=40503 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-dngjq subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1ffab11ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=511 identity=40503 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-dngjq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.145 37597491-0871-42bb-9231-0b8a75b18981 default }" containerID=cd6f3dc63760077dcb58b4c614999a87c5cbc3388dabecf08bd9073c3b08983f datapathConfiguration="&{false false false false false }" interface=lxc591ce3d59993 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8frns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd6f3dc637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 ipv4=10.0.0.145 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8frns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd6f3dc637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.145 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8frns subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd6f3dc637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 identity=29902 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.145 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8frns oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd6f3dc637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 identity=29902 ipv4=10.0.0.145 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8frns subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cd6f3dc637 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3222 identity=29902 ipv4=10.0.0.145 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8frns subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd6f3dc637 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3222 identity=29902 ipv4=10.0.0.145 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8frns subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3919 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03919 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03919 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03919 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03919:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3919 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 73c994f6-928a-43f5-8703-dc4e6faf9560 default }" containerID=ee8e06b2ed3b7289f6b2b6582ace34afb90279b2246fb54f6dbf5ed39088078e datapathConfiguration="&{false false false false false }" interface=lxcade28a3506f7 k8sPodName=monitoring/kube-prometheus-stack-admission-create-8blxl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee8e06b2ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2467 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8blxl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee8e06b2ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2467 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=4c657cb8-f910-4ff6-9b7e-ba8d85f24ff6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=4c657cb8-f910-4ff6-9b7e-ba8d85f24ff6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8blxl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=4c657cb8-f910-4ff6-9b7e-ba8d85f24ff6;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=4c657cb8-f910-4ff6-9b7e-ba8d85f24ff6;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee8e06b2ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2467 identity=14854 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=4c657cb8-f910-4ff6-9b7e-ba8d85f24ff6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=4c657cb8-f910-4ff6-9b7e-ba8d85f24ff6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8blxl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ee8e06b2ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2467 identity=14854 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8blxl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee8e06b2ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2467 identity=14854 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8blxl subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee8e06b2ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2467 identity=14854 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8blxl subsys=daemon level=info msg="Delete endpoint request" containerID=ee8e06b2ed endpointID=2467 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-8blxl subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=4c657cb8-f910-4ff6-9b7e-ba8d85f24ff6 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=4c657cb8-f910-4ff6-9b7e-ba8d85f24ff6 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=ee8e06b2ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2467 identity=14854 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8blxl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 aa6a31c7-6a29-4441-982f-386c9f4ea6b9 default }" containerID=a0bb4ab4e60f3133b19400dd8e67599208c12b7021b21fa766cf05be0edd5457 datapathConfiguration="&{false false false false false }" interface=lxccfd3cee41023 k8sPodName=monitoring/kube-prometheus-stack-grafana-5f87fc87bc-rpcsw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0bb4ab4e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=988 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5f87fc87bc-rpcsw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0bb4ab4e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=988 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5f87fc87bc-rpcsw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0bb4ab4e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=988 identity=19547 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5f87fc87bc-rpcsw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a0bb4ab4e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=988 identity=19547 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5f87fc87bc-rpcsw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.81 649a3604-a1f3-41af-82a4-502fcd849401 default }" containerID=38499e2c97807266f6b30d7c6c302087432d308e3c129793f745acfd00b000c4 datapathConfiguration="&{false false false false false }" interface=lxc9af73721c4ce k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mjpbz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38499e2c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mjpbz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38499e2c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mjpbz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38499e2c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identity=29193 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mjpbz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38499e2c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identity=29193 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mjpbz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 24c0b709-1bac-4595-86ad-be3233f91ffd default }" containerID=b343fae7afde11bdf2a1646bf547063503fb1964c578119b42c1a1d2be6a0a66 datapathConfiguration="&{false false false false false }" interface=lxc57dbcd5272a6 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8848z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b343fae7af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8848z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b343fae7af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8848z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b343fae7af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 identity=35471 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8848z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b343fae7af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 identity=35471 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8848z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a0bb4ab4e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=988 identity=19547 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5f87fc87bc-rpcsw subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0bb4ab4e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=988 identity=19547 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5f87fc87bc-rpcsw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=38499e2c97 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=9 identity=29193 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mjpbz subsys=endpoint level=info msg="Successful endpoint creation" containerID=38499e2c97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=9 identity=29193 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mjpbz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b343fae7af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1176 identity=35471 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8848z subsys=endpoint level=info msg="Successful endpoint creation" containerID=b343fae7af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1176 identity=35471 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8848z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.228 968cb8ef-18aa-44f4-be7d-f165e1878802 default }" containerID=c98bd1bc8f9c93ade347ac82712c3e1addbde3f5e469b66a7143f8d355e7998d datapathConfiguration="&{false false false false false }" interface=lxc49552806c7f8 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bwcvv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c98bd1bc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1934 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bwcvv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c98bd1bc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1934 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=71d252b7-81df-4436-b30b-4655d12dc186,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=71d252b7-81df-4436-b30b-4655d12dc186,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bwcvv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=71d252b7-81df-4436-b30b-4655d12dc186;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=71d252b7-81df-4436-b30b-4655d12dc186;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c98bd1bc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1934 identity=47380 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=71d252b7-81df-4436-b30b-4655d12dc186,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=71d252b7-81df-4436-b30b-4655d12dc186,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bwcvv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c98bd1bc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1934 identity=47380 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bwcvv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c98bd1bc8f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1934 identity=47380 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bwcvv subsys=endpoint level=info msg="Successful endpoint creation" containerID=c98bd1bc8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1934 identity=47380 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bwcvv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.136 8b8d5849-9d87-418a-853c-ad6b14c71129 default }" containerID=fba0400571d4cead80eb10a2528a9587c752a2b7062357a4c04339775fac4202 datapathConfiguration="&{false false false false false }" interface=lxc0a647270c248 k8sPodName=local-path-storage/helper-pod-create-pvc-0709e7df-6fc9-47df-ae83-79e934b44c9d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fba0400571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2119 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0709e7df-6fc9-47df-ae83-79e934b44c9d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fba0400571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2119 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0709e7df-6fc9-47df-ae83-79e934b44c9d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fba0400571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2119 identity=2382 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0709e7df-6fc9-47df-ae83-79e934b44c9d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fba0400571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2119 identity=2382 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0709e7df-6fc9-47df-ae83-79e934b44c9d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fba0400571 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2119 identity=2382 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0709e7df-6fc9-47df-ae83-79e934b44c9d subsys=endpoint level=info msg="Successful endpoint creation" containerID=fba0400571 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2119 identity=2382 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0709e7df-6fc9-47df-ae83-79e934b44c9d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.200 77723d69-179f-451a-9438-88638cda9b84 default }" containerID=f7f5bec8226a5b8d2d8d6372c77d8960d4bd269266deadb43534571bb6aff3e4 datapathConfiguration="&{false false false false false }" interface=lxc5b33cdba1ef7 k8sPodName=local-path-storage/helper-pod-create-pvc-a3d8afdb-95fc-471d-830d-45d96dca8cc4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7f5bec822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1778 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3d8afdb-95fc-471d-830d-45d96dca8cc4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7f5bec822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1778 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3d8afdb-95fc-471d-830d-45d96dca8cc4 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f7f5bec822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1778 identity=2382 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3d8afdb-95fc-471d-830d-45d96dca8cc4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7f5bec822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1778 identity=2382 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3d8afdb-95fc-471d-830d-45d96dca8cc4 subsys=endpoint level=info msg="Delete endpoint request" containerID=c98bd1bc8f endpointID=1934 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-bwcvv subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=71d252b7-81df-4436-b30b-4655d12dc186 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=71d252b7-81df-4436-b30b-4655d12dc186 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=c98bd1bc8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1934 identity=47380 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bwcvv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7f5bec822 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1778 identity=2382 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3d8afdb-95fc-471d-830d-45d96dca8cc4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7f5bec822 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1778 identity=2382 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3d8afdb-95fc-471d-830d-45d96dca8cc4 subsys=daemon level=info msg="Delete endpoint request" containerID=fba0400571 endpointID=2119 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0709e7df-6fc9-47df-ae83-79e934b44c9d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=f7f5bec822 endpointID=1778 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a3d8afdb-95fc-471d-830d-45d96dca8cc4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fba0400571 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2119 identity=2382 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0709e7df-6fc9-47df-ae83-79e934b44c9d subsys=endpoint level=info msg="Removed endpoint" containerID=f7f5bec822 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1778 identity=2382 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a3d8afdb-95fc-471d-830d-45d96dca8cc4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 50de0e0a-3700-4e1b-8ee6-1eab3f18b730 default }" containerID=51203c57ea2de930eb59ebf31df44df718cc19cb89123aaca4d1e3f96388bf2c datapathConfiguration="&{false false false false false }" interface=lxc7f2f495ea143 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51203c57ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3173 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51203c57ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3173 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51203c57ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3173 identity=3964 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51203c57ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3173 identity=3964 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=51203c57ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3173 identity=3964 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=51203c57ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3173 identity=3964 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.170 19abf620-b257-43d3-b0e9-a2dec77e1804 default }" containerID=9bbfb5e82f1a6b73590b7f5ae3c57166417dd5fe2f0c7ad69478487c3205a5a3 datapathConfiguration="&{false false false false false }" interface=lxc2c3db7e1c275 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9bbfb5e82f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9bbfb5e82f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9bbfb5e82f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identity=34695 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9bbfb5e82f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identity=34695 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9bbfb5e82f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=112 identity=34695 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9bbfb5e82f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=112 identity=34695 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.250 97128cef-8726-43ce-9337-4c99da44bd04 default }" containerID=dde9e077079e071efa8d6faa054ecc8bbf46d751410552dc870a5508fcd0f7d5 datapathConfiguration="&{false false false false false }" interface=lxc82497665d34c k8sPodName=monitoring/loki-gateway-cf54cb88c-hfhs6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dde9e07707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hfhs6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dde9e07707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hfhs6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dde9e07707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 identity=12663 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hfhs6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dde9e07707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 identity=12663 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hfhs6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 4586cce8-1d6c-493e-bcdf-b1ea38eab0a9 default }" containerID=8d76978d0390a3f32d66f5ce4b6550aa73151bb22eb2d8b93b15706550f405a0 datapathConfiguration="&{false false false false false }" interface=lxc284e2d895548 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d76978d03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4029 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d76978d03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4029 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.83 cffe301a-575f-42b0-b387-6eaa74335d06 default }" containerID=b764035e739c84ba525b927d06c29b9b4260a08484c34d1054ab3e2cfa17e172 datapathConfiguration="&{false false false false false }" interface=lxc6a4e59939fd9 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b764035e73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3468 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b764035e73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3468 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=8d76978d03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4029 identity=2646 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d76978d03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4029 identity=2646 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b764035e73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3468 identity=29307 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b764035e73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3468 identity=29307 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dde9e07707 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=846 identity=12663 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hfhs6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dde9e07707 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=846 identity=12663 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hfhs6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b764035e73 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3468 identity=29307 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b764035e73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3468 identity=29307 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8d76978d03 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4029 identity=2646 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d76978d03 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4029 identity=2646 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.75 b44dccba-3406-4a43-9f4b-ed08b2a25bf5 default }" containerID=bd701e49a283db426ffc6e047ab2ef3d1aa85e7088381859bde7e1ce310bc78d datapathConfiguration="&{false false false false false }" interface=lxc3c2e4cac4d2b k8sPodName=local-path-storage/helper-pod-create-pvc-125a934d-9ed0-4287-8942-c5247e6e0e56 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd701e49a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1231 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-125a934d-9ed0-4287-8942-c5247e6e0e56 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd701e49a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1231 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-125a934d-9ed0-4287-8942-c5247e6e0e56 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd701e49a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1231 identity=2382 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-125a934d-9ed0-4287-8942-c5247e6e0e56 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd701e49a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1231 identity=2382 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-125a934d-9ed0-4287-8942-c5247e6e0e56 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bd701e49a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1231 identity=2382 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-125a934d-9ed0-4287-8942-c5247e6e0e56 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd701e49a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1231 identity=2382 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-125a934d-9ed0-4287-8942-c5247e6e0e56 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.171 99f89a79-f1b7-4423-964e-afd3d730d405 default }" containerID=4e4bfd661f43c6262413d797fe2639d59329b112a2a8985842c6fc7b8e31baed datapathConfiguration="&{false false false false false }" interface=lxcf4e57aa0739e k8sPodName=monitoring/vector-96mpj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e4bfd661f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1668 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/vector-96mpj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e4bfd661f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1668 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/vector-96mpj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e4bfd661f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1668 identity=50398 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/vector-96mpj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e4bfd661f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1668 identity=50398 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/vector-96mpj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e4bfd661f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1668 identity=50398 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/vector-96mpj subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e4bfd661f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1668 identity=50398 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/vector-96mpj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bd701e49a2 endpointID=1231 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-125a934d-9ed0-4287-8942-c5247e6e0e56 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bd701e49a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1231 identity=2382 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-125a934d-9ed0-4287-8942-c5247e6e0e56 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 6f556d26-e879-4524-bd3d-680459fd8360 default }" containerID=3780dab1981eb74d8a004736daa54b935b34623b9b410a1caead9bf40013d5e8 datapathConfiguration="&{false false false false false }" interface=lxc78112561075c k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-sddn6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3780dab198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-sddn6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3780dab198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-sddn6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3780dab198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identity=10244 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-sddn6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3780dab198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identity=10244 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-sddn6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3780dab198 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=185 identity=10244 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-sddn6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3780dab198 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=185 identity=10244 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-sddn6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.152 8dfa09c1-9e25-4d9c-b95d-cbd1a8195657 default }" containerID=199d1b8bb31091ecd7dca6dd6972fff155ac0ba9a33f1b9fbb73c589e835cf79 datapathConfiguration="&{false false false false false }" interface=lxce387b184b659 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=199d1b8bb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=199d1b8bb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=199d1b8bb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=32546 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=199d1b8bb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=32546 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=199d1b8bb3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2047 identity=32546 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=199d1b8bb3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2047 identity=32546 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.64 e0e9f4fa-d9ae-41f9-baef-96e8439b6905 default }" containerID=40948b5ec7c29544b946d5fd52fc3443f4e68b2855de38770cf176567a3f698c datapathConfiguration="&{false false false false false }" interface=lxc29619a16ebbc k8sPodName=openstack/memcached-memcached-6479589586-kr77p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40948b5ec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kr77p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40948b5ec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kr77p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40948b5ec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identity=508 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kr77p oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=40948b5ec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identity=508 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kr77p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40948b5ec7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3488 identity=508 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kr77p subsys=endpoint level=info msg="Successful endpoint creation" containerID=40948b5ec7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3488 identity=508 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kr77p subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.234 cc22ac69-66a8-48a5-bddf-9fb0aad8fc31 default }" containerID=b6aa02e89805ab7626e08c1f0d8f7eca1a152d8c5a7e70759260ce9f3a1e5aba datapathConfiguration="&{false false false false false }" interface=lxca94d86c745e6 k8sPodName=local-path-storage/helper-pod-create-pvc-f0e4e980-d14f-4a77-a9a6-7fd8b2a95d7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6aa02e898 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0e4e980-d14f-4a77-a9a6-7fd8b2a95d7f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6aa02e898 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0e4e980-d14f-4a77-a9a6-7fd8b2a95d7f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6aa02e898 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 identity=2382 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0e4e980-d14f-4a77-a9a6-7fd8b2a95d7f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b6aa02e898 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 identity=2382 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0e4e980-d14f-4a77-a9a6-7fd8b2a95d7f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b6aa02e898 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=801 identity=2382 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0e4e980-d14f-4a77-a9a6-7fd8b2a95d7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6aa02e898 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=801 identity=2382 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0e4e980-d14f-4a77-a9a6-7fd8b2a95d7f subsys=daemon level=info msg="Delete endpoint request" containerID=b6aa02e898 endpointID=801 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f0e4e980-d14f-4a77-a9a6-7fd8b2a95d7f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b6aa02e898 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=801 identity=2382 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0e4e980-d14f-4a77-a9a6-7fd8b2a95d7f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 bd696538-d4a1-4712-8c82-d5929c6986f5 default }" containerID=e747523a7cbe56a958e9d5729909cb6366b2f71c58bc24c1e27b01656b584f85 datapathConfiguration="&{false false false false false }" interface=lxcb0148a422a8a k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e747523a7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e747523a7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e747523a7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e747523a7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 identity=15452 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e747523a7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 identity=15452 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e747523a7c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=984 identity=15452 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e747523a7c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=984 identity=15452 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.240 14711d2a-e491-43b8-9cbf-ce7dc5a5b15a default }" containerID=95e318c907bd8b7fe614166a2143efa0ff59491b26429c7ac6cc2d214116666a datapathConfiguration="&{false false false false false }" interface=lxc5d2818485564 k8sPodName=openstack/keystone-api-6ccf859ff8-qddst labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95e318c907 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-6ccf859ff8-qddst subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95e318c907 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-6ccf859ff8-qddst subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=95e318c907 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-6ccf859ff8-qddst line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=95e318c907 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 identity=42397 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-6ccf859ff8-qddst oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95e318c907 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=314 identity=42397 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-6ccf859ff8-qddst subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 cdd83a08-cd3c-4b01-8678-16eec2da7dbf default }" containerID=0f03edfbe1781ec51fd52d3c43518ee3036ea95ba3c13bc71050b8bfa1e54cb1 datapathConfiguration="&{false false false false false }" interface=lxc4c4b43ab5199 k8sPodName=openstack/keystone-credential-setup-vnrqm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f03edfbe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3304 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-credential-setup-vnrqm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f03edfbe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3304 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d045bd17-23f1-4ecc-b1e8-5ba846852014,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=d045bd17-23f1-4ecc-b1e8-5ba846852014,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-credential-setup-vnrqm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d045bd17-23f1-4ecc-b1e8-5ba846852014;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=d045bd17-23f1-4ecc-b1e8-5ba846852014;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f03edfbe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3304 identity=11755 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d045bd17-23f1-4ecc-b1e8-5ba846852014,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=d045bd17-23f1-4ecc-b1e8-5ba846852014,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-credential-setup-vnrqm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f03edfbe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3304 identity=11755 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-credential-setup-vnrqm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=95e318c907 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=314 identity=42397 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-6ccf859ff8-qddst subsys=endpoint level=info msg="Successful endpoint creation" containerID=95e318c907 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=314 identity=42397 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-6ccf859ff8-qddst subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0f03edfbe1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3304 identity=11755 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-credential-setup-vnrqm subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f03edfbe1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3304 identity=11755 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-credential-setup-vnrqm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0f03edfbe1 endpointID=3304 k8sNamespace=openstack k8sPodName=keystone-credential-setup-vnrqm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d045bd17-23f1-4ecc-b1e8-5ba846852014 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=d045bd17-23f1-4ecc-b1e8-5ba846852014 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0f03edfbe1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3304 identity=11755 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-credential-setup-vnrqm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 43bdd6b6-6f75-4ea7-9317-a17ed9c62260 default }" containerID=aa00fc5b08c1d657cacde6a4f82aed968429e4c67a009380d35f7a1a2b3c8cb7 datapathConfiguration="&{false false false false false }" interface=lxc39c24a352bd3 k8sPodName=openstack/keystone-db-init-mr46b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa00fc5b08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2770 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-init-mr46b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa00fc5b08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2770 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cc601388-f27f-46ec-82af-916ad2ca2435,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=cc601388-f27f-46ec-82af-916ad2ca2435,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-init-mr46b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=cc601388-f27f-46ec-82af-916ad2ca2435;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=cc601388-f27f-46ec-82af-916ad2ca2435;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa00fc5b08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2770 identity=38254 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cc601388-f27f-46ec-82af-916ad2ca2435,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=cc601388-f27f-46ec-82af-916ad2ca2435,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-init-mr46b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa00fc5b08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2770 identity=38254 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-init-mr46b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aa00fc5b08 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2770 identity=38254 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-init-mr46b subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa00fc5b08 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2770 identity=38254 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-init-mr46b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aa00fc5b08 endpointID=2770 k8sNamespace=openstack k8sPodName=keystone-db-init-mr46b subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=cc601388-f27f-46ec-82af-916ad2ca2435 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=cc601388-f27f-46ec-82af-916ad2ca2435 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=aa00fc5b08 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2770 identity=38254 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-init-mr46b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 a44c2f29-ed39-4289-af6d-10d0bc7a17a0 default }" containerID=b1bb42079e0bda7c404681927c5764e12f585f61a9716115fb82fdda55049212 datapathConfiguration="&{false false false false false }" interface=lxcc42b5747f644 k8sPodName=openstack/keystone-fernet-setup-chtg2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1bb42079e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3931 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-fernet-setup-chtg2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b1bb42079e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3931 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=aedeaaf6-8012-44cc-b6bf-b42e89f37106,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=aedeaaf6-8012-44cc-b6bf-b42e89f37106,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-fernet-setup-chtg2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=aedeaaf6-8012-44cc-b6bf-b42e89f37106;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=aedeaaf6-8012-44cc-b6bf-b42e89f37106;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b1bb42079e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3931 identity=23731 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=aedeaaf6-8012-44cc-b6bf-b42e89f37106,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=aedeaaf6-8012-44cc-b6bf-b42e89f37106,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-fernet-setup-chtg2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b1bb42079e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3931 identity=23731 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-fernet-setup-chtg2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b1bb42079e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3931 identity=23731 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-fernet-setup-chtg2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1bb42079e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3931 identity=23731 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-fernet-setup-chtg2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b1bb42079e endpointID=3931 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-chtg2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=aedeaaf6-8012-44cc-b6bf-b42e89f37106 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=aedeaaf6-8012-44cc-b6bf-b42e89f37106 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b1bb42079e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3931 identity=23731 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-fernet-setup-chtg2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 59d15821-99d4-43e5-8973-b053ef3be8cc default }" containerID=4837f553d9a740a7e932e6876bdca655191762dbcab20be9b89dc943d3256551 datapathConfiguration="&{false false false false false }" interface=lxc4b88859b912a k8sPodName=openstack/keystone-db-sync-8rtq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4837f553d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1279 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-db-sync-8rtq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4837f553d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1279 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5a7cecea-4fe5-4206-80cf-784dc19615f9,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=5a7cecea-4fe5-4206-80cf-784dc19615f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-db-sync-8rtq5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5a7cecea-4fe5-4206-80cf-784dc19615f9;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=5a7cecea-4fe5-4206-80cf-784dc19615f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4837f553d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1279 identity=13676 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5a7cecea-4fe5-4206-80cf-784dc19615f9,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=5a7cecea-4fe5-4206-80cf-784dc19615f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-db-sync-8rtq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4837f553d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1279 identity=13676 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-db-sync-8rtq5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4837f553d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1279 identity=13676 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-db-sync-8rtq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4837f553d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1279 identity=13676 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-db-sync-8rtq5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4837f553d9 endpointID=1279 k8sNamespace=openstack k8sPodName=keystone-db-sync-8rtq5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5a7cecea-4fe5-4206-80cf-784dc19615f9 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=5a7cecea-4fe5-4206-80cf-784dc19615f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4837f553d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1279 identity=13676 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-db-sync-8rtq5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 84e1f243-9503-4a5b-9e10-ac01b3189168 default }" containerID=7afcd49410b678ea23c9d5449920e6083583a6b07af66b718ea324b0c77db0fe datapathConfiguration="&{false false false false false }" interface=lxc0ff4280f03c4 k8sPodName=openstack/keystone-rabbit-init-t4m9q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7afcd49410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-t4m9q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7afcd49410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=20fcc7cb-719d-47ae-a8df-cc38fe1f9c5d,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=20fcc7cb-719d-47ae-a8df-cc38fe1f9c5d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-t4m9q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=20fcc7cb-719d-47ae-a8df-cc38fe1f9c5d;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=20fcc7cb-719d-47ae-a8df-cc38fe1f9c5d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7afcd49410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 identity=15269 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=20fcc7cb-719d-47ae-a8df-cc38fe1f9c5d,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=20fcc7cb-719d-47ae-a8df-cc38fe1f9c5d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-t4m9q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7afcd49410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 identity=15269 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-t4m9q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7afcd49410 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=55 identity=15269 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-t4m9q subsys=endpoint level=info msg="Successful endpoint creation" containerID=7afcd49410 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=55 identity=15269 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-t4m9q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7afcd49410 endpointID=55 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-t4m9q subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=20fcc7cb-719d-47ae-a8df-cc38fe1f9c5d k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=20fcc7cb-719d-47ae-a8df-cc38fe1f9c5d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7afcd49410 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=55 identity=15269 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-rabbit-init-t4m9q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 1802dc86-1b3e-4dd2-bc2b-4af578777fa1 default }" containerID=bb160489469a644680172cb5e40885214ae67c51cfcfcfca0fe735e5eee89303 datapathConfiguration="&{false false false false false }" interface=lxc0a982aa80b2d k8sPodName=openstack/keystone-domain-manage-v8x25 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb16048946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1036 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-domain-manage-v8x25 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb16048946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1036 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4bac71e7-4b72-469e-a2f4-85caf02e8b9e,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=4bac71e7-4b72-469e-a2f4-85caf02e8b9e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-domain-manage-v8x25 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4bac71e7-4b72-469e-a2f4-85caf02e8b9e;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=4bac71e7-4b72-469e-a2f4-85caf02e8b9e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=bb16048946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1036 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-domain-manage-v8x25 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bb16048946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1036 identity=23566 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4bac71e7-4b72-469e-a2f4-85caf02e8b9e,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=4bac71e7-4b72-469e-a2f4-85caf02e8b9e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-domain-manage-v8x25 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb16048946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1036 identity=23566 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-domain-manage-v8x25 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb16048946 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1036 identity=23566 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-domain-manage-v8x25 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb16048946 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1036 identity=23566 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-domain-manage-v8x25 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bb16048946 endpointID=1036 k8sNamespace=openstack k8sPodName=keystone-domain-manage-v8x25 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4bac71e7-4b72-469e-a2f4-85caf02e8b9e k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=4bac71e7-4b72-469e-a2f4-85caf02e8b9e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=bb16048946 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1036 identity=23566 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-domain-manage-v8x25 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 5271959f-0e62-494e-9d8d-60907ba4a267 default }" containerID=0c7c1c37bad67cb851c0c2299b9b24b091003e4838c05e9d31af240b6bebff6c datapathConfiguration="&{false false false false false }" interface=lxc900b42d0e444 k8sPodName=openstack/keystone-bootstrap-bqnhf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c7c1c37ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1829 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-bootstrap-bqnhf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c7c1c37ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1829 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dbef374f-9150-4e32-86bd-b201085c1586,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=dbef374f-9150-4e32-86bd-b201085c1586,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-bootstrap-bqnhf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=dbef374f-9150-4e32-86bd-b201085c1586;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=dbef374f-9150-4e32-86bd-b201085c1586;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c7c1c37ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1829 identity=3933 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dbef374f-9150-4e32-86bd-b201085c1586,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=dbef374f-9150-4e32-86bd-b201085c1586,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-bootstrap-bqnhf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c7c1c37ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1829 identity=3933 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-bootstrap-bqnhf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0c7c1c37ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1829 identity=3933 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-bootstrap-bqnhf subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c7c1c37ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1829 identity=3933 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-bootstrap-bqnhf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0c7c1c37ba endpointID=1829 k8sNamespace=openstack k8sPodName=keystone-bootstrap-bqnhf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=dbef374f-9150-4e32-86bd-b201085c1586 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=dbef374f-9150-4e32-86bd-b201085c1586 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0c7c1c37ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1829 identity=3933 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-bootstrap-bqnhf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 aa74e532-5124-4674-8973-105d8d2fb26b default }" containerID=2bc85cd1724b5ac807ba07327390e40c6d23e5a1dafb0abe3e0541cde7481ead datapathConfiguration="&{false false false false false }" interface=lxc013f8250b413 k8sPodName=local-path-storage/helper-pod-create-pvc-878f2b1e-36e0-4800-a56c-1e2861e64bb7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2bc85cd172 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-878f2b1e-36e0-4800-a56c-1e2861e64bb7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2bc85cd172 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-878f2b1e-36e0-4800-a56c-1e2861e64bb7 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2bc85cd172 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identity=2382 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-878f2b1e-36e0-4800-a56c-1e2861e64bb7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2bc85cd172 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identity=2382 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-878f2b1e-36e0-4800-a56c-1e2861e64bb7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2bc85cd172 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=812 identity=2382 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-878f2b1e-36e0-4800-a56c-1e2861e64bb7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2bc85cd172 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=812 identity=2382 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-878f2b1e-36e0-4800-a56c-1e2861e64bb7 subsys=daemon level=info msg="Delete endpoint request" containerID=2bc85cd172 endpointID=812 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-878f2b1e-36e0-4800-a56c-1e2861e64bb7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2bc85cd172 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=812 identity=2382 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-878f2b1e-36e0-4800-a56c-1e2861e64bb7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 ba4dc8d8-000f-402e-aaad-10de5fc2398b default }" containerID=72d25f58ce1ac1463f7bc08837254076ef0dad61f37759906703068abca8a772 datapathConfiguration="&{false false false false false }" interface=lxcc43a91164cf7 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72d25f58ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72d25f58ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72d25f58ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identity=18932 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72d25f58ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identity=18932 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=72d25f58ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=13 identity=18932 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=72d25f58ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=13 identity=18932 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.97 58250863-c55c-41aa-b4bd-6335e5073c7b default }" containerID=756053f9de7b678d524e2664419193afbb9baf68d457c1da192e5d0f19cf6acb datapathConfiguration="&{false false false false false }" interface=lxc1b058d4f1189 k8sPodName=openstack/barbican-api-ff86b8c9d-6frn8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=756053f9de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/barbican-api-ff86b8c9d-6frn8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=756053f9de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/barbican-api-ff86b8c9d-6frn8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=756053f9de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identity=6909 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/barbican-api-ff86b8c9d-6frn8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=756053f9de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identity=6909 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/barbican-api-ff86b8c9d-6frn8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.166 be478b04-71da-4f09-87e3-33731db98c13 default }" containerID=e862f460a8c6c92bbae9e23279937ff0d39f0e01b0ba9180ea50396a461a7282 datapathConfiguration="&{false false false false false }" interface=lxc6ebaaf4086a0 k8sPodName=openstack/barbican-db-init-f6lgv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e862f460a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3787 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-db-init-f6lgv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e862f460a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3787 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b3ca0364-ccfe-47cd-8c5e-a4932ff4ba65,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=b3ca0364-ccfe-47cd-8c5e-a4932ff4ba65,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-db-init-f6lgv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b3ca0364-ccfe-47cd-8c5e-a4932ff4ba65;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=b3ca0364-ccfe-47cd-8c5e-a4932ff4ba65;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e862f460a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3787 identity=6322 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b3ca0364-ccfe-47cd-8c5e-a4932ff4ba65,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=b3ca0364-ccfe-47cd-8c5e-a4932ff4ba65,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-db-init-f6lgv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e862f460a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3787 identity=6322 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-db-init-f6lgv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=756053f9de datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=980 identity=6909 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/barbican-api-ff86b8c9d-6frn8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=756053f9de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=980 identity=6909 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/barbican-api-ff86b8c9d-6frn8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e862f460a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3787 identity=6322 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-db-init-f6lgv subsys=endpoint level=info msg="Successful endpoint creation" containerID=e862f460a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3787 identity=6322 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-db-init-f6lgv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e862f460a8 endpointID=3787 k8sNamespace=openstack k8sPodName=barbican-db-init-f6lgv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b3ca0364-ccfe-47cd-8c5e-a4932ff4ba65 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=b3ca0364-ccfe-47cd-8c5e-a4932ff4ba65 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e862f460a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3787 identity=6322 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-db-init-f6lgv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 14db7593-85fc-416c-9521-a489c24ebc26 default }" containerID=df38886786070d6aaa5d79cd2fe4e3790b7f7a9b7b1970112241ba415f59b30c datapathConfiguration="&{false false false false false }" interface=lxc1d8b404f4224 k8sPodName=openstack/barbican-db-sync-4kwz4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df38886786 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/barbican-db-sync-4kwz4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df38886786 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f2aaaf83-5991-4c5f-8e8c-1726c2ef9eaa,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=f2aaaf83-5991-4c5f-8e8c-1726c2ef9eaa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/barbican-db-sync-4kwz4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f2aaaf83-5991-4c5f-8e8c-1726c2ef9eaa;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=f2aaaf83-5991-4c5f-8e8c-1726c2ef9eaa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df38886786 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 identity=9077 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f2aaaf83-5991-4c5f-8e8c-1726c2ef9eaa,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=f2aaaf83-5991-4c5f-8e8c-1726c2ef9eaa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/barbican-db-sync-4kwz4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df38886786 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 identity=9077 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/barbican-db-sync-4kwz4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df38886786 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2084 identity=9077 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/barbican-db-sync-4kwz4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=df38886786 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2084 identity=9077 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/barbican-db-sync-4kwz4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.035876608005194315 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=df38886786 endpointID=2084 k8sNamespace=openstack k8sPodName=barbican-db-sync-4kwz4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f2aaaf83-5991-4c5f-8e8c-1726c2ef9eaa k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=f2aaaf83-5991-4c5f-8e8c-1726c2ef9eaa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=df38886786 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2084 identity=9077 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/barbican-db-sync-4kwz4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 a5a95579-3bab-43e7-bd64-cad47212888e default }" containerID=bcf3c428ce0b406c190e05b5454f0718c945c6496f0adbd97af0bad3b15ef5ef datapathConfiguration="&{false false false false false }" interface=lxc402e2616c172 k8sPodName=openstack/barbican-rabbit-init-qdnq9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bcf3c428ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=978 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-rabbit-init-qdnq9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bcf3c428ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=978 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ffb646b1-31b8-4aa2-9b90-1a7686d684eb,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ffb646b1-31b8-4aa2-9b90-1a7686d684eb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-rabbit-init-qdnq9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ffb646b1-31b8-4aa2-9b90-1a7686d684eb;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ffb646b1-31b8-4aa2-9b90-1a7686d684eb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=bcf3c428ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=978 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-rabbit-init-qdnq9 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bcf3c428ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=978 identity=13293 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ffb646b1-31b8-4aa2-9b90-1a7686d684eb,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ffb646b1-31b8-4aa2-9b90-1a7686d684eb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-rabbit-init-qdnq9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bcf3c428ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=978 identity=13293 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-rabbit-init-qdnq9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bcf3c428ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=978 identity=13293 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-rabbit-init-qdnq9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bcf3c428ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=978 identity=13293 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-rabbit-init-qdnq9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bcf3c428ce endpointID=978 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-qdnq9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ffb646b1-31b8-4aa2-9b90-1a7686d684eb k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ffb646b1-31b8-4aa2-9b90-1a7686d684eb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=bcf3c428ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=978 identity=13293 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-rabbit-init-qdnq9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 6dd0565c-ec17-466f-b1be-37a201b8c0fd default }" containerID=8e0ee76334563144c75f73540b642ad0c0ab4b265be8af180e25fb03dbdb9405 datapathConfiguration="&{false false false false false }" interface=lxce7c56ca4b4b6 k8sPodName=openstack/barbican-ks-service-5spz6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e0ee76334 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-ks-service-5spz6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e0ee76334 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0a9b256d-1695-4e1c-adb9-11c8682306c5,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=0a9b256d-1695-4e1c-adb9-11c8682306c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-ks-service-5spz6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0a9b256d-1695-4e1c-adb9-11c8682306c5;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=0a9b256d-1695-4e1c-adb9-11c8682306c5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e0ee76334 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=40949 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0a9b256d-1695-4e1c-adb9-11c8682306c5,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=0a9b256d-1695-4e1c-adb9-11c8682306c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-ks-service-5spz6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8e0ee76334 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=40949 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-ks-service-5spz6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e0ee76334 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=124 identity=40949 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-ks-service-5spz6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e0ee76334 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=124 identity=40949 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-ks-service-5spz6 subsys=daemon level=info msg="Delete endpoint request" containerID=8e0ee76334 endpointID=124 k8sNamespace=openstack k8sPodName=barbican-ks-service-5spz6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0a9b256d-1695-4e1c-adb9-11c8682306c5 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=0a9b256d-1695-4e1c-adb9-11c8682306c5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8e0ee76334 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=124 identity=40949 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-ks-service-5spz6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 c1704314-68be-46e2-98fd-4e41d5ce033c default }" containerID=d745de0b44692bbf94d8cd57c53f22e81f9849f85f3d15c209079d76dac44a24 datapathConfiguration="&{false false false false false }" interface=lxc2bcc7cb9ce5e k8sPodName=openstack/barbican-ks-endpoints-zhlgx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d745de0b44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2712 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zhlgx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d745de0b44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2712 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8c791a13-e2c3-447f-91d6-ad22992dcd69,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8c791a13-e2c3-447f-91d6-ad22992dcd69,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zhlgx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8c791a13-e2c3-447f-91d6-ad22992dcd69;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=8c791a13-e2c3-447f-91d6-ad22992dcd69;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d745de0b44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2712 identity=41208 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8c791a13-e2c3-447f-91d6-ad22992dcd69,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8c791a13-e2c3-447f-91d6-ad22992dcd69,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zhlgx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d745de0b44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2712 identity=41208 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zhlgx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d745de0b44 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2712 identity=41208 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zhlgx subsys=endpoint level=info msg="Successful endpoint creation" containerID=d745de0b44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2712 identity=41208 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zhlgx subsys=daemon level=info msg="Delete endpoint request" containerID=d745de0b44 endpointID=2712 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-zhlgx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8c791a13-e2c3-447f-91d6-ad22992dcd69 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=8c791a13-e2c3-447f-91d6-ad22992dcd69 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d745de0b44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2712 identity=41208 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zhlgx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 d39d9216-c4fe-4c02-818b-18f811b0f075 default }" containerID=5a70cfde0573f387ec9bd51fd75adbb7d6e9a8294ef94ff80daba5580e547d21 datapathConfiguration="&{false false false false false }" interface=lxc83b4655feef0 k8sPodName=openstack/barbican-ks-user-lq5rf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a70cfde05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-user-lq5rf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a70cfde05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ffcd26c6-f2e0-4248-804c-78c91aded054,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=ffcd26c6-f2e0-4248-804c-78c91aded054,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-user-lq5rf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ffcd26c6-f2e0-4248-804c-78c91aded054;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=ffcd26c6-f2e0-4248-804c-78c91aded054;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a70cfde05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 identity=49719 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ffcd26c6-f2e0-4248-804c-78c91aded054,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=ffcd26c6-f2e0-4248-804c-78c91aded054,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-user-lq5rf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a70cfde05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 identity=49719 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-user-lq5rf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a70cfde05 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=200 identity=49719 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-user-lq5rf subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a70cfde05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=200 identity=49719 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-user-lq5rf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5a70cfde05 endpointID=200 k8sNamespace=openstack k8sPodName=barbican-ks-user-lq5rf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ffcd26c6-f2e0-4248-804c-78c91aded054 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=ffcd26c6-f2e0-4248-804c-78c91aded054 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5a70cfde05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=200 identity=49719 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-user-lq5rf subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.30 e7c5ecf6-b0e0-4a88-9376-4c7c78f4beb5 default }" containerID=aec453e59591ecba17fb6261f500b920ea25dbd2409193c15f1843ca009ff273 datapathConfiguration="&{false false false false false }" interface=lxc02c4bb3bfd80 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mnsbj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aec453e595 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2535 ipv4=10.0.0.30 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mnsbj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aec453e595 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2535 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.30 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mnsbj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aec453e595 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2535 identity=6462 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.30 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mnsbj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aec453e595 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2535 identity=6462 ipv4=10.0.0.30 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mnsbj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aec453e595 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2535 identity=6462 ipv4=10.0.0.30 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mnsbj subsys=endpoint level=info msg="Successful endpoint creation" containerID=aec453e595 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2535 identity=6462 ipv4=10.0.0.30 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mnsbj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.23 4b2b6a62-acdd-4d1b-8245-dce398f4e289 default }" containerID=ad5fd1707309d7cd80697d5ee408788d0322c94ed61f52dd6483cfb25889af40 datapathConfiguration="&{false false false false false }" interface=lxc70b7717c046d k8sPodName=openstack/rook-ceph-detect-version-vl98c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad5fd17073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=857 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vl98c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad5fd17073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=857 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=85fde621-f0f7-4946-8d8b-82dd35c592c8,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=85fde621-f0f7-4946-8d8b-82dd35c592c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vl98c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ad5fd17073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=857 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vl98c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=85fde621-f0f7-4946-8d8b-82dd35c592c8;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=85fde621-f0f7-4946-8d8b-82dd35c592c8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad5fd17073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=857 identity=2435 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=85fde621-f0f7-4946-8d8b-82dd35c592c8,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=85fde621-f0f7-4946-8d8b-82dd35c592c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vl98c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad5fd17073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=857 identity=2435 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vl98c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad5fd17073 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=857 identity=2435 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vl98c subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad5fd17073 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=857 identity=2435 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vl98c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ad5fd17073 endpointID=857 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-vl98c subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=85fde621-f0f7-4946-8d8b-82dd35c592c8 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=85fde621-f0f7-4946-8d8b-82dd35c592c8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=ad5fd17073 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=857 identity=2435 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vl98c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 76d6c2d1-b27f-4f4f-8b82-5594d1c10ad9 default }" containerID=2ca1c678fa1de0532288f33c6218359a9fc3d55f71b16f45bfde802632d6ff51 datapathConfiguration="&{false false false false false }" interface=lxc5a136df75e84 k8sPodName=openstack/ceph-object-controller-detect-version-5crpz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ca1c678fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5crpz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ca1c678fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=df01bdf9-af12-436c-9ab6-4210239697a2,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=df01bdf9-af12-436c-9ab6-4210239697a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5crpz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=df01bdf9-af12-436c-9ab6-4210239697a2;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=df01bdf9-af12-436c-9ab6-4210239697a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ca1c678fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 identity=50774 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=df01bdf9-af12-436c-9ab6-4210239697a2,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=df01bdf9-af12-436c-9ab6-4210239697a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5crpz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ca1c678fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 identity=50774 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5crpz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2ca1c678fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3280 identity=50774 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5crpz subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ca1c678fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3280 identity=50774 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5crpz subsys=daemon level=info msg="Delete endpoint request" containerID=2ca1c678fa endpointID=3280 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-5crpz subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=df01bdf9-af12-436c-9ab6-4210239697a2 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=df01bdf9-af12-436c-9ab6-4210239697a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=2ca1c678fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3280 identity=50774 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5crpz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 5d41007f-f41f-42d2-a4dc-b1c7b88d0350 default }" containerID=49130228624dda4495c84710e10062fdbb7426a6ce358f69b7b955cf6a1221b9 datapathConfiguration="&{false false false false false }" interface=lxc04f70dc45fa2 k8sPodName=local-path-storage/helper-pod-create-pvc-ea2a0356-6d38-4b66-99b0-d851cc354d40 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4913022862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea2a0356-6d38-4b66-99b0-d851cc354d40 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4913022862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea2a0356-6d38-4b66-99b0-d851cc354d40 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4913022862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=2382 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea2a0356-6d38-4b66-99b0-d851cc354d40 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4913022862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=2382 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea2a0356-6d38-4b66-99b0-d851cc354d40 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4913022862 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=367 identity=2382 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea2a0356-6d38-4b66-99b0-d851cc354d40 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4913022862 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=367 identity=2382 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea2a0356-6d38-4b66-99b0-d851cc354d40 subsys=daemon level=info msg="Delete endpoint request" containerID=4913022862 endpointID=367 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ea2a0356-6d38-4b66-99b0-d851cc354d40 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4913022862 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=367 identity=2382 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea2a0356-6d38-4b66-99b0-d851cc354d40 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 e2a6fbdf-102b-40de-ad5c-4b71f877891a default }" containerID=f205f6c9899fe29fc182bcebdd7ad6bad205440a477f69b69e0fb0e1a9a535cc datapathConfiguration="&{false false false false false }" interface=lxcb320725541f1 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f205f6c989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2130 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f205f6c989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2130 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f205f6c989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2130 identity=37979 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f205f6c989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2130 identity=37979 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f205f6c989 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2130 identity=37979 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f205f6c989 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2130 identity=37979 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.181 046d4e8f-e166-4539-97aa-249a05332908 default }" containerID=bb27dbc4cb7df6c88d5c9052b79dc3a0bedbcbca9b72f06431113a69677465f6 datapathConfiguration="&{false false false false false }" interface=lxc00554dea76f0 k8sPodName=openstack/glance-db-init-5sxgd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb27dbc4cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-5sxgd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb27dbc4cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=506de085-93d2-4404-aa28-a7133cd0ffc8,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=506de085-93d2-4404-aa28-a7133cd0ffc8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-5sxgd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=506de085-93d2-4404-aa28-a7133cd0ffc8;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=506de085-93d2-4404-aa28-a7133cd0ffc8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=bb27dbc4cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identity=9640 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=506de085-93d2-4404-aa28-a7133cd0ffc8,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=506de085-93d2-4404-aa28-a7133cd0ffc8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-5sxgd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb27dbc4cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identity=9640 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-5sxgd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb27dbc4cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=260 identity=9640 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-5sxgd subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb27dbc4cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=260 identity=9640 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-5sxgd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bb27dbc4cb endpointID=260 k8sNamespace=openstack k8sPodName=glance-db-init-5sxgd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=506de085-93d2-4404-aa28-a7133cd0ffc8 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=506de085-93d2-4404-aa28-a7133cd0ffc8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bb27dbc4cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=260 identity=9640 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-5sxgd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 8464cc09-c5a6-4a0a-a08e-97a6b0828bb6 default }" containerID=ef3945b2a3b4c1786e742d7ee6e4f13ca7c6035fe8fa7d63f061b95a6607a2a2 datapathConfiguration="&{false false false false false }" interface=lxc126de959cc9e k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8dlp2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef3945b2a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8dlp2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef3945b2a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8dlp2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef3945b2a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 identity=34809 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8dlp2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef3945b2a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 identity=34809 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8dlp2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.229 051a5c52-10d9-49ef-a703-4b251f4f62d9 default }" containerID=177ff3c4dc60f325d1cec9ca1c11343ef19805417f0c5eebf2361c74865d0a76 datapathConfiguration="&{false false false false false }" interface=lxcde8047a56e9e k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lzdt4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=177ff3c4dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2617 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lzdt4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=177ff3c4dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2617 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lzdt4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=177ff3c4dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2617 identity=28947 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lzdt4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=177ff3c4dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2617 identity=28947 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lzdt4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 7e80f1b1-0987-4a1e-8dfb-179fb7d7b30e default }" containerID=b7ae0426cafa5833c4b1a1732d02e35bf05a13511bf55fd5ee240aa2d6de72bf datapathConfiguration="&{false false false false false }" interface=lxc911c6517c8de k8sPodName=openstack/glance-db-sync-2l6kk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7ae0426ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2713 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-db-sync-2l6kk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7ae0426ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2713 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d0778e1d-a885-48b7-819b-0807744cefad,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=d0778e1d-a885-48b7-819b-0807744cefad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-db-sync-2l6kk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=ef3945b2a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=464 identity=34809 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8dlp2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef3945b2a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=464 identity=34809 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8dlp2 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d0778e1d-a885-48b7-819b-0807744cefad;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=d0778e1d-a885-48b7-819b-0807744cefad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7ae0426ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2713 identity=7265 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d0778e1d-a885-48b7-819b-0807744cefad,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=d0778e1d-a885-48b7-819b-0807744cefad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-db-sync-2l6kk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7ae0426ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2713 identity=7265 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-db-sync-2l6kk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=177ff3c4dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2617 identity=28947 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lzdt4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=177ff3c4dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2617 identity=28947 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lzdt4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b7ae0426ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2713 identity=7265 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-db-sync-2l6kk subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7ae0426ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2713 identity=7265 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-db-sync-2l6kk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b7ae0426ca endpointID=2713 k8sNamespace=openstack k8sPodName=glance-db-sync-2l6kk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d0778e1d-a885-48b7-819b-0807744cefad k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=d0778e1d-a885-48b7-819b-0807744cefad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b7ae0426ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2713 identity=7265 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-db-sync-2l6kk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 4abba07b-8e5e-403f-9458-37f9dd815fd1 default }" containerID=b012c425c2e825e3d8d0a6348e64b939189106e23acfd8ccef7478056bfad37d datapathConfiguration="&{false false false false false }" interface=lxc9f6922097a76 k8sPodName=openstack/glance-rabbit-init-mlbk2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b012c425c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1935 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-rabbit-init-mlbk2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b012c425c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1935 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7fea80f9-d720-426d-95e5-16aa5f75eb29,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7fea80f9-d720-426d-95e5-16aa5f75eb29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-rabbit-init-mlbk2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b012c425c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1935 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-rabbit-init-mlbk2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7fea80f9-d720-426d-95e5-16aa5f75eb29;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=7fea80f9-d720-426d-95e5-16aa5f75eb29;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b012c425c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1935 identity=15753 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7fea80f9-d720-426d-95e5-16aa5f75eb29,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7fea80f9-d720-426d-95e5-16aa5f75eb29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-rabbit-init-mlbk2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b012c425c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1935 identity=15753 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-rabbit-init-mlbk2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b012c425c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1935 identity=15753 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-rabbit-init-mlbk2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b012c425c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1935 identity=15753 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-rabbit-init-mlbk2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b012c425c2 endpointID=1935 k8sNamespace=openstack k8sPodName=glance-rabbit-init-mlbk2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7fea80f9-d720-426d-95e5-16aa5f75eb29 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=7fea80f9-d720-426d-95e5-16aa5f75eb29 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b012c425c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1935 identity=15753 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-rabbit-init-mlbk2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 bcf69fcb-ab2d-426c-90a0-d06fdf09598e default }" containerID=23e984b28ebc5bbd627aef88a79db0d34e22c0f0b81aefccd1ac45edb8e42363 datapathConfiguration="&{false false false false false }" interface=lxcbc133c69aa28 k8sPodName=openstack/glance-ks-service-7kpsm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23e984b28e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3629 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-ks-service-7kpsm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23e984b28e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3629 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=251dad4b-0d4f-42b4-84a7-f089ec9df6bb,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=251dad4b-0d4f-42b4-84a7-f089ec9df6bb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-ks-service-7kpsm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=23e984b28e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3629 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-ks-service-7kpsm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=251dad4b-0d4f-42b4-84a7-f089ec9df6bb;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=251dad4b-0d4f-42b4-84a7-f089ec9df6bb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23e984b28e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3629 identity=42726 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=251dad4b-0d4f-42b4-84a7-f089ec9df6bb,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=251dad4b-0d4f-42b4-84a7-f089ec9df6bb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-ks-service-7kpsm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23e984b28e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3629 identity=42726 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-ks-service-7kpsm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23e984b28e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3629 identity=42726 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-ks-service-7kpsm subsys=endpoint level=info msg="Successful endpoint creation" containerID=23e984b28e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3629 identity=42726 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-ks-service-7kpsm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=23e984b28e endpointID=3629 k8sNamespace=openstack k8sPodName=glance-ks-service-7kpsm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=251dad4b-0d4f-42b4-84a7-f089ec9df6bb k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=251dad4b-0d4f-42b4-84a7-f089ec9df6bb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=23e984b28e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3629 identity=42726 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-ks-service-7kpsm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 1844cc44-cc96-4478-a0e6-c51fdbe80526 default }" containerID=fe29b33b914e4a6ac8f9eb84e3231c82db8bf669c46c8e23911da9019dddef9e datapathConfiguration="&{false false false false false }" interface=lxc64cc5068b359 k8sPodName=openstack/glance-ks-endpoints-xsl9q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe29b33b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2953 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-ks-endpoints-xsl9q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe29b33b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2953 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6ea32fbe-192d-4d11-946e-838f80a9e685,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6ea32fbe-192d-4d11-946e-838f80a9e685,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-ks-endpoints-xsl9q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6ea32fbe-192d-4d11-946e-838f80a9e685;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=6ea32fbe-192d-4d11-946e-838f80a9e685;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe29b33b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2953 identity=48012 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6ea32fbe-192d-4d11-946e-838f80a9e685,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6ea32fbe-192d-4d11-946e-838f80a9e685,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-ks-endpoints-xsl9q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe29b33b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2953 identity=48012 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-ks-endpoints-xsl9q subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fe29b33b91 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2953 identity=48012 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-ks-endpoints-xsl9q subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe29b33b91 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2953 identity=48012 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-ks-endpoints-xsl9q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fe29b33b91 endpointID=2953 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-xsl9q subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6ea32fbe-192d-4d11-946e-838f80a9e685 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=6ea32fbe-192d-4d11-946e-838f80a9e685 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=fe29b33b91 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2953 identity=48012 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-ks-endpoints-xsl9q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 b41993cb-c20c-4bf2-9cc3-687a058fb664 default }" containerID=d11cab9f728af285139aeebb78989c34799b678c9fb753543b8d00bf7487f678 datapathConfiguration="&{false false false false false }" interface=lxcbdde63011d40 k8sPodName=openstack/glance-ks-user-qq9d4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d11cab9f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=99 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-qq9d4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d11cab9f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=99 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=435022a6-0a9a-484e-80b7-467e6dcdab82,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=435022a6-0a9a-484e-80b7-467e6dcdab82,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-qq9d4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=435022a6-0a9a-484e-80b7-467e6dcdab82;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=435022a6-0a9a-484e-80b7-467e6dcdab82;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d11cab9f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=99 identity=60125 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=435022a6-0a9a-484e-80b7-467e6dcdab82,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=435022a6-0a9a-484e-80b7-467e6dcdab82,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-qq9d4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d11cab9f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=99 identity=60125 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-qq9d4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d11cab9f72 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=99 identity=60125 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-qq9d4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d11cab9f72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=99 identity=60125 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-qq9d4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d11cab9f72 endpointID=99 k8sNamespace=openstack k8sPodName=glance-ks-user-qq9d4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=435022a6-0a9a-484e-80b7-467e6dcdab82 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=435022a6-0a9a-484e-80b7-467e6dcdab82 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d11cab9f72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=99 identity=60125 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-qq9d4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 986971c0-0e15-4d21-94b2-a9d1b786efed default }" containerID=9ba5dd86c796a428cecb023e9e9d27a9a6e0122478b10e8f7a42f4bc3da80d90 datapathConfiguration="&{false false false false false }" interface=lxcc1ce21dd18cf k8sPodName=openstack/glance-metadefs-load-fnssl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ba5dd86c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-metadefs-load-fnssl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ba5dd86c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a41af911-2f51-421b-8ae4-148e43e4f772,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a41af911-2f51-421b-8ae4-148e43e4f772,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-metadefs-load-fnssl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a41af911-2f51-421b-8ae4-148e43e4f772;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=a41af911-2f51-421b-8ae4-148e43e4f772;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ba5dd86c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 identity=60596 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a41af911-2f51-421b-8ae4-148e43e4f772,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a41af911-2f51-421b-8ae4-148e43e4f772,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-metadefs-load-fnssl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ba5dd86c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 identity=60596 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-metadefs-load-fnssl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9ba5dd86c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3057 identity=60596 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-metadefs-load-fnssl subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ba5dd86c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3057 identity=60596 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-metadefs-load-fnssl subsys=daemon level=info msg="Delete endpoint request" containerID=9ba5dd86c7 endpointID=3057 k8sNamespace=openstack k8sPodName=glance-metadefs-load-fnssl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a41af911-2f51-421b-8ae4-148e43e4f772 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=a41af911-2f51-421b-8ae4-148e43e4f772 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9ba5dd86c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3057 identity=60596 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-metadefs-load-fnssl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 7e4e66ff-839c-49a2-a4e0-49312c197b10 default }" containerID=93f4851c4403f4d5411f28789117026357a9efc475aff8da2ea9615e5a3eac63 datapathConfiguration="&{false false false false false }" interface=lxcb8d7497e24a2 k8sPodName=openstack/glance-storage-init-2j7gj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93f4851c44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3141 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-storage-init-2j7gj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93f4851c44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3141 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3fd2d0f3-b5c4-459a-8b79-79851b21d672,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=3fd2d0f3-b5c4-459a-8b79-79851b21d672,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-storage-init-2j7gj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3fd2d0f3-b5c4-459a-8b79-79851b21d672;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=3fd2d0f3-b5c4-459a-8b79-79851b21d672;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=93f4851c44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3141 identity=11208 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3fd2d0f3-b5c4-459a-8b79-79851b21d672,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=3fd2d0f3-b5c4-459a-8b79-79851b21d672,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-storage-init-2j7gj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93f4851c44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3141 identity=11208 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-storage-init-2j7gj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=93f4851c44 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3141 identity=11208 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-storage-init-2j7gj subsys=endpoint level=info msg="Successful endpoint creation" containerID=93f4851c44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3141 identity=11208 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-storage-init-2j7gj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=93f4851c44 endpointID=3141 k8sNamespace=openstack k8sPodName=glance-storage-init-2j7gj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3fd2d0f3-b5c4-459a-8b79-79851b21d672 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=3fd2d0f3-b5c4-459a-8b79-79851b21d672 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=93f4851c44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3141 identity=11208 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-storage-init-2j7gj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 3e03d3f7-d71f-48a5-8a43-99b536b16a1a default }" containerID=61c726d9ce457b984c9ea72a7fd5f1ecdc1d3b1dd15fb6500ce8a1c8ec16b75a datapathConfiguration="&{false false false false false }" interface=lxc88f2eab0bfc3 k8sPodName=openstack/glance-api-bc686cc7c-8mg6k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61c726d9ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/glance-api-bc686cc7c-8mg6k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61c726d9ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/glance-api-bc686cc7c-8mg6k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=61c726d9ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 identity=7690 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/glance-api-bc686cc7c-8mg6k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61c726d9ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 identity=7690 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/glance-api-bc686cc7c-8mg6k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=61c726d9ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=970 identity=7690 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/glance-api-bc686cc7c-8mg6k subsys=endpoint level=info msg="Successful endpoint creation" containerID=61c726d9ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=970 identity=7690 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/glance-api-bc686cc7c-8mg6k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.95 037ba549-1ab6-4fb7-aead-9b698fbd4f20 default }" containerID=e5f70d6b9821bfe91687518a53fc42235642df053e76435ba07efcb1c23d0b54 datapathConfiguration="&{false false false false false }" interface=lxc172a7332384d k8sPodName=openstack/staffeln-conductor-5865c9d964-lsbrk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5f70d6b98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-conductor-5865c9d964-lsbrk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5f70d6b98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-conductor-5865c9d964-lsbrk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5f70d6b98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 identity=23878 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-conductor-5865c9d964-lsbrk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5f70d6b98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 identity=23878 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-conductor-5865c9d964-lsbrk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.249 0b6c0bdd-9c11-44ae-9476-92bc235ec337 default }" containerID=afe1c5d103837153129d662967d106692128dae4b6e7bfbfbc235b3869efeeff datapathConfiguration="&{false false false false false }" interface=lxc268c34b1bae5 k8sPodName=openstack/staffeln-api-cfc97d9f-5vckd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=afe1c5d103 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1598 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-api-cfc97d9f-5vckd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=afe1c5d103 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1598 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-api-cfc97d9f-5vckd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=afe1c5d103 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1598 identity=53249 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-api-cfc97d9f-5vckd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=afe1c5d103 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1598 identity=53249 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-api-cfc97d9f-5vckd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 e16189c0-0cda-4e5c-a0ed-aecf98ed5cbb default }" containerID=b94d153181bbb3bb67fd574ff4516d6dd13a6d2647a3791578817acaf39c5363 datapathConfiguration="&{false false false false false }" interface=lxcb979b198dd7d k8sPodName=openstack/staffeln-db-init-kddjc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b94d153181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/staffeln-db-init-kddjc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b94d153181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=ae679683-ae76-4b0e-af91-1d30faa7167d,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=ae679683-ae76-4b0e-af91-1d30faa7167d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/staffeln-db-init-kddjc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=ae679683-ae76-4b0e-af91-1d30faa7167d;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=ae679683-ae76-4b0e-af91-1d30faa7167d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b94d153181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 identity=12322 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=ae679683-ae76-4b0e-af91-1d30faa7167d,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=ae679683-ae76-4b0e-af91-1d30faa7167d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/staffeln-db-init-kddjc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b94d153181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 identity=12322 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/staffeln-db-init-kddjc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e5f70d6b98 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=38 identity=23878 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-conductor-5865c9d964-lsbrk subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5f70d6b98 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=38 identity=23878 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-conductor-5865c9d964-lsbrk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=afe1c5d103 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1598 identity=53249 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-api-cfc97d9f-5vckd subsys=endpoint level=info msg="Successful endpoint creation" containerID=afe1c5d103 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1598 identity=53249 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-api-cfc97d9f-5vckd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b94d153181 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2092 identity=12322 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/staffeln-db-init-kddjc subsys=endpoint level=info msg="Successful endpoint creation" containerID=b94d153181 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2092 identity=12322 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/staffeln-db-init-kddjc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b94d153181 endpointID=2092 k8sNamespace=openstack k8sPodName=staffeln-db-init-kddjc subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=ae679683-ae76-4b0e-af91-1d30faa7167d k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=ae679683-ae76-4b0e-af91-1d30faa7167d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=b94d153181 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2092 identity=12322 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/staffeln-db-init-kddjc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 7a09bbc1-8066-456c-af17-c5ac8bbfcf97 default }" containerID=e5941916d332c336b76a37fae9e825aa1382626e87690b8203919d494d191281 datapathConfiguration="&{false false false false false }" interface=lxc210f8c35ffa1 k8sPodName=openstack/staffeln-db-sync-nw6vd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5941916d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/staffeln-db-sync-nw6vd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5941916d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=bb05281d-3624-491b-b957-7d4b89bbaabe,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=bb05281d-3624-491b-b957-7d4b89bbaabe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/staffeln-db-sync-nw6vd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e5941916d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.158 ipv6= k8sPodName=openstack/staffeln-db-sync-nw6vd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=bb05281d-3624-491b-b957-7d4b89bbaabe;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=bb05281d-3624-491b-b957-7d4b89bbaabe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5941916d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identity=31804 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=bb05281d-3624-491b-b957-7d4b89bbaabe,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=bb05281d-3624-491b-b957-7d4b89bbaabe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/staffeln-db-sync-nw6vd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5941916d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identity=31804 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/staffeln-db-sync-nw6vd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e5941916d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1124 identity=31804 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/staffeln-db-sync-nw6vd subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5941916d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1124 identity=31804 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/staffeln-db-sync-nw6vd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager