level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.144386ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="56.501µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.299311ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="6.69µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=103.11732ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.881µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="21.821µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="79.333µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="89.703µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="83.863µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="451.674µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="3.37µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.174074ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.616494ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="54.212µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="53.091µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="577.449µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="79.433µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="64.382µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=145.915823ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="98.213µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="16.66µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="4.811µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.62.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.03553ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="17.671µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.782919ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.870561ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.17µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.65µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.8µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.23µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="25.351µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="13.451µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="42.532µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="292.09µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.73µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.63µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="244.168µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="805.105µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.232139ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.35µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="20.091µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.62 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.62 ipAddr.ipv6="" k8sNodeIP=199.19.213.62 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.62" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.26" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.62" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.62} {CiliumInternalIP 10.0.0.26}] 10.0.0.0/24 [] [] 10.0.0.82 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:45899" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.433387681s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="16.301µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="11.9µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="67.692µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="10.73µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=4.050266515s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=319.652868ms file-path=/var/run/cilium/state/templates/43ae94bd45218a9219e6781814672288e583b7348a58b44b1d67d948b68ba9c5/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1389 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3373 ipv4=10.0.0.82 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3373 identityLabels="reserved:health" ipv4=10.0.0.82 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3373 identity=4 identityLabels="reserved:health" ipv4=10.0.0.82 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 e7a3d50a-9295-4c3b-a5c0-732992e0a94c default }" containerID=4ffbe58549fbc970cd1f0c54e61ee6c167cd47748a0005cc8e3a69a16dbdea2c datapathConfiguration="&{false false false false false }" interface=lxc9f4c0999f39f k8sPodName=kube-system/coredns-7c96b6546b-qt6s9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ffbe58549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3940 ipv4=10.0.0.60 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qt6s9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ffbe58549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3940 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.60 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qt6s9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.252 ffc98df5-a892-45f3-8969-302fab20a12e default }" containerID=26803c481319187336c663c5c80def8405181aa7de6a7d1f6fb65aa4a13b8a89 datapathConfiguration="&{false false false false false }" interface=lxc601dac37eb22 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c6p52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26803c4813 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c6p52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26803c4813 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=32b4c289-0b9b-4576-816a-f8d0b20d7377,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=32b4c289-0b9b-4576-816a-f8d0b20d7377,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c6p52 subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=26803c4813 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c6p52 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ffbe58549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3940 identity=32289 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.60 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qt6s9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ffbe58549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3940 identity=32289 ipv4=10.0.0.60 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qt6s9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=32b4c289-0b9b-4576-816a-f8d0b20d7377;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=32b4c289-0b9b-4576-816a-f8d0b20d7377;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26803c4813 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identity=10124 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=32b4c289-0b9b-4576-816a-f8d0b20d7377,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=32b4c289-0b9b-4576-816a-f8d0b20d7377,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c6p52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26803c4813 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identity=10124 ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c6p52 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.097074887s file-path=/var/run/cilium/state/templates/d53dbcb05bc41e770f1c1fe763d0826870b71d68b8211b8f61a62c5bc2a3d453/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=4ffbe58549 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3940 identity=32289 ipv4=10.0.0.60 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qt6s9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ffbe58549 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3940 identity=32289 ipv4=10.0.0.60 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qt6s9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3373 identity=4 ipv4=10.0.0.82 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26803c4813 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=993 identity=10124 ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c6p52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=26803c4813 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=993 identity=10124 ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c6p52 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=26803c4813 endpointID=993 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-c6p52 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=32b4c289-0b9b-4576-816a-f8d0b20d7377 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=32b4c289-0b9b-4576-816a-f8d0b20d7377 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=26803c4813 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=993 identity=10124 ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c6p52 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 dd59d979-b1c2-4b0c-95cc-84dbfe8e2fe4 default }" containerID=183c58a0fe19cd1bc514e11aee2f8546c3e0ae3f3e55f52a66abb12a3f5c29d2 datapathConfiguration="&{false false false false false }" interface=lxca8182a336204 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gws28 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=183c58a0fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 ipv4=10.0.0.53 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gws28 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=183c58a0fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.53 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gws28 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=183c58a0fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.53 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gws28 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=183c58a0fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identity=57399 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.53 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gws28 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=183c58a0fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identity=57399 ipv4=10.0.0.53 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gws28 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=183c58a0fe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=93 identity=57399 ipv4=10.0.0.53 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gws28 subsys=endpoint level=info msg="Successful endpoint creation" containerID=183c58a0fe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=93 identity=57399 ipv4=10.0.0.53 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gws28 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1389 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01389 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01389 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01389 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01389:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1389 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 968ed5cc-f9d8-4d0b-83af-40a557a4a00a default }" containerID=289c0b8c5cd54e30356578b97ab2d6b4f3f053ed794032b34e300731f881ece4 datapathConfiguration="&{false false false false false }" interface=lxcc2a9565edb26 k8sPodName=kube-system/coredns-67659f764b-gsbgm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=289c0b8c5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 ipv4=10.0.0.226 ipv6= k8sPodName=kube-system/coredns-67659f764b-gsbgm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=289c0b8c5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.226 ipv6= k8sPodName=kube-system/coredns-67659f764b-gsbgm subsys=endpoint level=info msg="Identity of endpoint changed" containerID=289c0b8c5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identity=32289 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.226 ipv6= k8sPodName=kube-system/coredns-67659f764b-gsbgm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=289c0b8c5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identity=32289 ipv4=10.0.0.226 ipv6= k8sPodName=kube-system/coredns-67659f764b-gsbgm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=289c0b8c5c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2757 identity=32289 ipv4=10.0.0.226 ipv6= k8sPodName=kube-system/coredns-67659f764b-gsbgm subsys=endpoint level=info msg="Successful endpoint creation" containerID=289c0b8c5c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2757 identity=32289 ipv4=10.0.0.226 ipv6= k8sPodName=kube-system/coredns-67659f764b-gsbgm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.128 c6b2207e-f2ff-4c17-8ce8-b99bee8fa025 default }" containerID=33746913e0f95fc23a3447280da8ea742c4bb33c828c3b8ad9003f475c268b78 datapathConfiguration="&{false false false false false }" interface=lxc172c01051471 k8sPodName=kube-system/coredns-67659f764b-f2bgj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33746913e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-67659f764b-f2bgj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33746913e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-67659f764b-f2bgj subsys=endpoint level=info msg="Identity of endpoint changed" containerID=33746913e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identity=32289 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-67659f764b-f2bgj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33746913e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identity=32289 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-67659f764b-f2bgj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33746913e0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=893 identity=32289 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-67659f764b-f2bgj subsys=endpoint level=info msg="Successful endpoint creation" containerID=33746913e0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=893 identity=32289 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-67659f764b-f2bgj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.25 cf2c96cf-177c-49b9-9489-a372e65b47d8 default }" containerID=60e69f798ecfd752a72ade2df9bd7a9bb2d22aa8a8715c93f4ee4ef5a772cb5a datapathConfiguration="&{false false false false false }" interface=lxc19ea456ff918 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hccl9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60e69f798e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3531 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hccl9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60e69f798e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3531 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hccl9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60e69f798e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3531 identity=15558 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hccl9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60e69f798e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3531 identity=15558 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hccl9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=60e69f798e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3531 identity=15558 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hccl9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=60e69f798e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3531 identity=15558 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-hccl9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4ffbe58549 endpointID=3940 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-qt6s9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=4ffbe58549 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3940 identity=32289 ipv4=10.0.0.60 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qt6s9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 e49bec7c-83ad-4ded-b16e-6107af46a701 default }" containerID=9f991ad08c2d606d4dfb33f629605c11b872ca33bf13e5a1af4a86b36127b06c datapathConfiguration="&{false false false false false }" interface=lxcca8874f19264 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fnr8x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f991ad08c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3734 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fnr8x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f991ad08c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3734 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fnr8x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9f991ad08c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3734 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fnr8x line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9f991ad08c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3734 identity=8183 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fnr8x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f991ad08c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3734 identity=8183 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fnr8x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f991ad08c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3734 identity=8183 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fnr8x subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f991ad08c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3734 identity=8183 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fnr8x subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.195 93a8292b-a0b3-41eb-8861-d1b322655606 default }" containerID=3b004f9988e0aec82a4950aa01ce21bfe5555a4edbf5f482ce44041602c5e4b6 datapathConfiguration="&{false false false false false }" interface=lxc0534369866d4 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5csn4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b004f9988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 ipv4=10.0.0.195 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5csn4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b004f9988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.195 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5csn4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b004f9988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identity=4579 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.195 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5csn4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b004f9988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identity=4579 ipv4=10.0.0.195 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5csn4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 f843da97-e97e-4626-bfe4-73faf662ce5a default }" containerID=516440719f79632c540951c1ca043d5e369ad35b9f2448f59ec4d42d6a46f865 datapathConfiguration="&{false false false false false }" interface=lxc45c3083c5eed k8sPodName=cert-manager/cert-manager-75c4c745bc-ldgjv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=516440719f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2679 ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-ldgjv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=516440719f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2679 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-ldgjv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=516440719f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2679 identity=63027 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-ldgjv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=516440719f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2679 identity=63027 ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-ldgjv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b004f9988 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1861 identity=4579 ipv4=10.0.0.195 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5csn4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b004f9988 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1861 identity=4579 ipv4=10.0.0.195 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5csn4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=516440719f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2679 identity=63027 ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-ldgjv subsys=endpoint level=info msg="Successful endpoint creation" containerID=516440719f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2679 identity=63027 ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-ldgjv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.171 9a549c22-adb9-442c-82d1-df144c3f9f12 default }" containerID=0c8119bceabe0959f0089f513e7757e7083573fd018baae1c23c7476f980d2b2 datapathConfiguration="&{false false false false false }" interface=lxc998598697cc8 k8sPodName=cert-manager/cert-manager-startupapicheck-4fpdl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c8119bcea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 ipv4=10.0.0.171 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4fpdl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c8119bcea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=89ea603e-e76f-48f8-96f5-af6eb7e31241,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=89ea603e-e76f-48f8-96f5-af6eb7e31241,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.171 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4fpdl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=89ea603e-e76f-48f8-96f5-af6eb7e31241;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=89ea603e-e76f-48f8-96f5-af6eb7e31241;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c8119bcea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identity=24735 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=89ea603e-e76f-48f8-96f5-af6eb7e31241,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=89ea603e-e76f-48f8-96f5-af6eb7e31241,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.171 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4fpdl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c8119bcea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identity=24735 ipv4=10.0.0.171 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4fpdl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c8119bcea datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=90 identity=24735 ipv4=10.0.0.171 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4fpdl subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c8119bcea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=90 identity=24735 ipv4=10.0.0.171 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4fpdl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0c8119bcea endpointID=90 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-4fpdl subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=89ea603e-e76f-48f8-96f5-af6eb7e31241 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=89ea603e-e76f-48f8-96f5-af6eb7e31241 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=0c8119bcea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=90 identity=24735 ipv4=10.0.0.171 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4fpdl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 80d8772e-0aff-4be4-924c-e6da21015888 default }" containerID=71100100664876db1b7cdb36706a71075cf5cd81186c0d83ba5bd3b6264e222f datapathConfiguration="&{false false false false false }" interface=lxcbe846db06086 k8sPodName=ingress-nginx/ingress-nginx-admission-create-sx2cv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7110010066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=850 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sx2cv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7110010066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=850 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e92dd1c4-13c3-446c-b61f-5ede48395df0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=e92dd1c4-13c3-446c-b61f-5ede48395df0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sx2cv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=e92dd1c4-13c3-446c-b61f-5ede48395df0;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=e92dd1c4-13c3-446c-b61f-5ede48395df0;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7110010066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=850 identity=20324 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e92dd1c4-13c3-446c-b61f-5ede48395df0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=e92dd1c4-13c3-446c-b61f-5ede48395df0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sx2cv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7110010066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=850 identity=20324 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sx2cv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7110010066 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=850 identity=20324 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sx2cv subsys=endpoint level=info msg="Successful endpoint creation" containerID=7110010066 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=850 identity=20324 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sx2cv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7110010066 endpointID=850 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-sx2cv subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=e92dd1c4-13c3-446c-b61f-5ede48395df0 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=e92dd1c4-13c3-446c-b61f-5ede48395df0 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=7110010066 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=850 identity=20324 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-sx2cv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 c1647031-9cf5-4695-92c2-1ba687c8a61e default }" containerID=1ca648a28da909688804328ac69bc181de15c2ce9f0ff1741bbf37cf4f3c4e57 datapathConfiguration="&{false false false false false }" interface=lxcc0308d81cf58 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tcs5f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ca648a28d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1477 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tcs5f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ca648a28d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1477 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tcs5f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1ca648a28d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1477 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tcs5f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ca648a28d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1477 identity=41038 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tcs5f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ca648a28d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1477 identity=41038 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tcs5f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ca648a28d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1477 identity=41038 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tcs5f subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ca648a28d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1477 identity=41038 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tcs5f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.158 35fbfa15-b9a9-4ffc-8f31-3018ec1bbd87 default }" containerID=734ede648af319d027072c7e2419a711ee5519a1d69c1c515992df854bc60518 datapathConfiguration="&{false false false false false }" interface=lxcd38c6041f91f k8sPodName=ingress-nginx/ingress-nginx-admission-patch-x858r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=734ede648a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-x858r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=734ede648a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3db7bdc9-831d-4066-a73e-d4f1ece97020,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=3db7bdc9-831d-4066-a73e-d4f1ece97020,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-x858r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=3db7bdc9-831d-4066-a73e-d4f1ece97020;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=3db7bdc9-831d-4066-a73e-d4f1ece97020;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=734ede648a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 identity=8037 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3db7bdc9-831d-4066-a73e-d4f1ece97020,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=3db7bdc9-831d-4066-a73e-d4f1ece97020,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-x858r oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=734ede648a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 identity=8037 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-x858r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=734ede648a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=582 identity=8037 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-x858r subsys=endpoint level=info msg="Successful endpoint creation" containerID=734ede648a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=582 identity=8037 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-x858r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=734ede648a endpointID=582 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-x858r subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=3db7bdc9-831d-4066-a73e-d4f1ece97020 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=3db7bdc9-831d-4066-a73e-d4f1ece97020 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=734ede648a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=582 identity=8037 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-x858r subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=603bcc36-9b5b-4cba-b7e4-da854a45220a] Description:}]" policyAddRequest=1462db45-3547-49da-a48e-f23d9bd1805b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=1462db45-3547-49da-a48e-f23d9bd1805b policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=9f6a0a05-5ac5-4fae-a4e3-7482cc106de7] Description:}]" policyAddRequest=63bc2799-1375-450e-a52c-201539f84a2e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=63bc2799-1375-450e-a52c-201539f84a2e policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.239 0f467fba-3821-492c-b0ea-4cce5eb520ad default }" containerID=623e737e3f328b6df970f93fd287f3a68d52eda453a219a8f349a30eb7341b53 datapathConfiguration="&{false false false false false }" interface=lxc025f6807d7b1 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4k26d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=623e737e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4k26d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=623e737e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4k26d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=623e737e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 identity=52906 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4k26d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=623e737e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 identity=52906 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4k26d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=623e737e3f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=999 identity=52906 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4k26d subsys=endpoint level=info msg="Successful endpoint creation" containerID=623e737e3f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=999 identity=52906 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4k26d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.117 6fafc746-f733-47cd-a780-25eaf30fac31 default }" containerID=64e5ad0e8eddac8c1f45bf30d79dfaeb16ee1ccfba0a43a35049348da0c14ef7 datapathConfiguration="&{false false false false false }" interface=lxc28be87c0bcad k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-795sz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64e5ad0e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-795sz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64e5ad0e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-795sz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64e5ad0e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identity=26397 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-795sz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64e5ad0e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identity=26397 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-795sz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64e5ad0e8e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3916 identity=26397 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-795sz subsys=endpoint level=info msg="Successful endpoint creation" containerID=64e5ad0e8e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3916 identity=26397 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-795sz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.138 b32f7f74-2586-44c9-99de-7df5f67b32f3 default }" containerID=ea7946f2eafc507a45e98593443c19b9f03b029469b90ef9bc8e6519038ddaf1 datapathConfiguration="&{false false false false false }" interface=lxc6968ec9680e0 k8sPodName=openstack/pxc-operator-69cb5bbdb9-flbll labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea7946f2ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-flbll subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea7946f2ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-flbll subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ea7946f2ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.138 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-flbll line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea7946f2ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identity=2153 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-flbll oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea7946f2ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identity=2153 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-flbll subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea7946f2ea datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1008 identity=2153 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-flbll subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea7946f2ea datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1008 identity=2153 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-flbll subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.211 454e4ddb-7b69-448e-a73c-030877c0f751 default }" containerID=003d3f6b078b2da540fe2d59e1e699ff741d843309d4bc057f9b0b7175e6e741 datapathConfiguration="&{false false false false false }" interface=lxc3061c4018152 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=003d3f6b07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=003d3f6b07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=003d3f6b07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=13136 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=003d3f6b07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=13136 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.111 fa1b6240-ff1d-4fdb-9835-fd25c2fec7a1 default }" containerID=21dcf7ec9d6c0a9713cd061f3b8d7e7e2c90298caafbbc8dd7a60e1e93cafece datapathConfiguration="&{false false false false false }" interface=lxc3d9db8687bdb k8sPodName=local-path-storage/helper-pod-create-pvc-1364095e-cd4b-4a75-ae7e-6589626a5054 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21dcf7ec9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2465 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1364095e-cd4b-4a75-ae7e-6589626a5054 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21dcf7ec9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2465 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1364095e-cd4b-4a75-ae7e-6589626a5054 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21dcf7ec9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2465 identity=10500 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1364095e-cd4b-4a75-ae7e-6589626a5054 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21dcf7ec9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2465 identity=10500 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1364095e-cd4b-4a75-ae7e-6589626a5054 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=003d3f6b07 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=311 identity=13136 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=003d3f6b07 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=311 identity=13136 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=21dcf7ec9d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2465 identity=10500 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1364095e-cd4b-4a75-ae7e-6589626a5054 subsys=endpoint level=info msg="Successful endpoint creation" containerID=21dcf7ec9d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2465 identity=10500 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1364095e-cd4b-4a75-ae7e-6589626a5054 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=21dcf7ec9d endpointID=2465 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1364095e-cd4b-4a75-ae7e-6589626a5054 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=21dcf7ec9d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2465 identity=10500 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1364095e-cd4b-4a75-ae7e-6589626a5054 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 b66ab27e-d994-4959-b450-bc4ac9ba7a50 default }" containerID=015d05cb8adcd5a3d2a68238e0d4983948cdc14a48c3b9ffbbd2250456626ab2 datapathConfiguration="&{false false false false false }" interface=lxc4d80f4a6292e k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=015d05cb8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=015d05cb8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=015d05cb8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identity=6314 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=015d05cb8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identity=6314 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=015d05cb8a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1607 identity=6314 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=015d05cb8a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1607 identity=6314 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=3118e747-aa22-4019-916e-4be314f9d8cb] Description:}]" policyAddRequest=7db747ef-dbca-45e0-a56a-15dae5bc195e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7db747ef-dbca-45e0-a56a-15dae5bc195e policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.206 a146c186-511c-4a5f-ba03-c58e076f2e8e default }" containerID=1959e13dbeb8ba6c306b316a5e1a791b21d1da2d7d945a2bb66114aa86e72a96 datapathConfiguration="&{false false false false false }" interface=lxc86f8a1576238 k8sPodName=local-path-storage/helper-pod-create-pvc-ee72c115-38e4-4605-b0b2-ed8befcd22c0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1959e13dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1448 ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ee72c115-38e4-4605-b0b2-ed8befcd22c0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1959e13dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1448 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ee72c115-38e4-4605-b0b2-ed8befcd22c0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1959e13dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1448 identity=10500 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ee72c115-38e4-4605-b0b2-ed8befcd22c0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1959e13dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1448 identity=10500 ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ee72c115-38e4-4605-b0b2-ed8befcd22c0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1959e13dbe datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1448 identity=10500 ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ee72c115-38e4-4605-b0b2-ed8befcd22c0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1959e13dbe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1448 identity=10500 ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ee72c115-38e4-4605-b0b2-ed8befcd22c0 subsys=daemon level=info msg="Delete endpoint request" containerID=1959e13dbe endpointID=1448 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ee72c115-38e4-4605-b0b2-ed8befcd22c0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1959e13dbe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1448 identity=10500 ipv4=10.0.0.206 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ee72c115-38e4-4605-b0b2-ed8befcd22c0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 466288e5-3ff1-49f3-aee3-f2e1d0a4df37 default }" containerID=5285af5cc6050115fd72cafb78fcccbef467560d6ccb7313a2bc0df68d8745e9 datapathConfiguration="&{false false false false false }" interface=lxc818c1d547d9e k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5285af5cc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5285af5cc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5285af5cc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identity=8202 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5285af5cc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identity=8202 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5285af5cc6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=121 identity=8202 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5285af5cc6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=121 identity=8202 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=65040697-84d0-452d-8bca-847b9b827c4b] Description:}]" policyAddRequest=b857ad23-36dd-4d4e-bea8-c1910c7733bb subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=b857ad23-36dd-4d4e-bea8-c1910c7733bb policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.199 9739d307-8e6e-40b1-9f39-53ada7f55c6c default }" containerID=305211827c38cb0548b0676bf3b7172f434818ad8a145df8170aaef67feea997 datapathConfiguration="&{false false false false false }" interface=lxc8770294fc9b1 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=305211827c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 ipv4=10.0.0.199 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=305211827c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.199 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=305211827c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identity=11043 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.199 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=305211827c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identity=11043 ipv4=10.0.0.199 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=305211827c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=498 identity=11043 ipv4=10.0.0.199 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=305211827c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=498 identity=11043 ipv4=10.0.0.199 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.005874037902254927 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.222 f817a8cb-bd1f-48ed-aea6-009d901f8af9 default }" containerID=e3b0357d23a68a71e3a3c04e24d12477ba74b2a81d6c030ff5e2dc81d4ae0ad9 datapathConfiguration="&{false false false false false }" interface=lxcd8742f70559f k8sPodName=monitoring/node-feature-discovery-worker-pftgn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3b0357d23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3897 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-pftgn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3b0357d23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3897 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-pftgn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3b0357d23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3897 identity=29834 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-pftgn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e3b0357d23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3897 identity=29834 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-pftgn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 a02fe000-274c-4bcd-be8f-cfc067c4a9f5 default }" containerID=c6cfd30500b97845d5f7b82e7f31f32772cae68008fff11ef88918542229d16e datapathConfiguration="&{false false false false false }" interface=lxc4f4ce7b5f379 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbzp7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6cfd30500 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbzp7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6cfd30500 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbzp7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.173 0adf623e-61ae-4e56-a1cf-88578a366791 default }" containerID=363391c6d276e3f914ff7b2848218bd8bfaaaecfac72e94f88d486621e227fd9 datapathConfiguration="&{false false false false false }" interface=lxcb1b84539c9e0 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vn54k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=363391c6d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vn54k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=363391c6d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vn54k subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6cfd30500 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identity=3834 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbzp7 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=c6cfd30500 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identity=3834 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbzp7 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=363391c6d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identity=3672 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vn54k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=363391c6d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identity=3672 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vn54k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3b0357d23 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3897 identity=29834 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-pftgn subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3b0357d23 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3897 identity=29834 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-pftgn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c6cfd30500 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1549 identity=3834 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbzp7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6cfd30500 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1549 identity=3834 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbzp7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=363391c6d2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=253 identity=3672 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vn54k subsys=endpoint level=info msg="Successful endpoint creation" containerID=363391c6d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=253 identity=3672 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vn54k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.121 4e57bbc6-d0c7-49bd-adb6-0877c8352e68 default }" containerID=62e3648561a1c41fb612b0b8992a07a90ddff35cdde72304263d9facda9ffaeb datapathConfiguration="&{false false false false false }" interface=lxc780d055286be k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4tcq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62e3648561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 ipv4=10.0.0.121 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4tcq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62e3648561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.121 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4tcq5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62e3648561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identity=43260 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.121 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4tcq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62e3648561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identity=43260 ipv4=10.0.0.121 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4tcq5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=62e3648561 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=454 identity=43260 ipv4=10.0.0.121 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4tcq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=62e3648561 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=454 identity=43260 ipv4=10.0.0.121 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4tcq5 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1389 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01389 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01389 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01389 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01389:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1389 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 ed4de786-eded-4ff0-b533-a935387595f0 default }" containerID=4cbf4a13cc301cd1dfa594119200baf12b48953213c4351a1737204c764b4836 datapathConfiguration="&{false false false false false }" interface=lxcacca1a7cbca7 k8sPodName=monitoring/kube-prometheus-stack-admission-create-zz99g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4cbf4a13cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zz99g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4cbf4a13cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=65c8c34c-05bb-4b4c-b4bd-a86a2e16902e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=65c8c34c-05bb-4b4c-b4bd-a86a2e16902e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zz99g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4cbf4a13cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zz99g line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=65c8c34c-05bb-4b4c-b4bd-a86a2e16902e;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=65c8c34c-05bb-4b4c-b4bd-a86a2e16902e;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4cbf4a13cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 identity=1876 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=65c8c34c-05bb-4b4c-b4bd-a86a2e16902e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=65c8c34c-05bb-4b4c-b4bd-a86a2e16902e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zz99g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4cbf4a13cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 identity=1876 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zz99g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4cbf4a13cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=171 identity=1876 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zz99g subsys=endpoint level=info msg="Successful endpoint creation" containerID=4cbf4a13cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=171 identity=1876 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zz99g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4cbf4a13cc endpointID=171 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-zz99g subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=65c8c34c-05bb-4b4c-b4bd-a86a2e16902e k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=65c8c34c-05bb-4b4c-b4bd-a86a2e16902e k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=4cbf4a13cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=171 identity=1876 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zz99g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 0fef6ccb-886f-4552-8ac9-2257f8d651b0 default }" containerID=93ea0ac9974de5f4d3a635a819016c4517960de37495825736506159d52c117c datapathConfiguration="&{false false false false false }" interface=lxc323fc83df647 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jnrd2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93ea0ac997 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1886 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jnrd2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93ea0ac997 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1886 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jnrd2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=93ea0ac997 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1886 identity=35179 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jnrd2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=93ea0ac997 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1886 identity=35179 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jnrd2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 6dc3b322-df17-4d51-af00-f317df84a614 default }" containerID=9ee23cd8e21b153182b352ff4a978dff677b185927c0c20732980fd8bb6f019e datapathConfiguration="&{false false false false false }" interface=lxca59bae1eceaf k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-d4vh5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ee23cd8e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-d4vh5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ee23cd8e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-d4vh5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ee23cd8e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 identity=64483 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-d4vh5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ee23cd8e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 identity=64483 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-d4vh5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=93ea0ac997 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1886 identity=35179 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jnrd2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=93ea0ac997 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1886 identity=35179 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jnrd2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9ee23cd8e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2017 identity=64483 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-d4vh5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ee23cd8e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2017 identity=64483 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-d4vh5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.33 6cb7818b-71c5-445e-98b2-2b275fd38375 default }" containerID=eb510ccfeed752578ef3745b6bd7d61716770e240c9c7bc1fe6d472339ff0520 datapathConfiguration="&{false false false false false }" interface=lxc8e975e724fcb k8sPodName=monitoring/kube-prometheus-stack-grafana-78c66c8bf-2565p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb510ccfee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2652 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-78c66c8bf-2565p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb510ccfee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2652 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-78c66c8bf-2565p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb510ccfee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2652 identity=57126 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-78c66c8bf-2565p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb510ccfee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2652 identity=57126 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-78c66c8bf-2565p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb510ccfee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2652 identity=57126 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-78c66c8bf-2565p subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb510ccfee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2652 identity=57126 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-78c66c8bf-2565p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.3 28d274ea-b049-4e08-913d-7eb6e8467a0c default }" containerID=c66ccbe2aaa0ca05fa39ac15264ac550250cd4c87b1e76d174d267848bf6fbb6 datapathConfiguration="&{false false false false false }" interface=lxcf312d3ae8b5f k8sPodName=monitoring/kube-prometheus-stack-admission-patch-pbq2l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c66ccbe2aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-pbq2l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c66ccbe2aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=8707aed9-721b-4e1d-96f2-9749e8e33543,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=8707aed9-721b-4e1d-96f2-9749e8e33543,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-pbq2l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=8707aed9-721b-4e1d-96f2-9749e8e33543;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=8707aed9-721b-4e1d-96f2-9749e8e33543;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c66ccbe2aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 identity=33734 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=8707aed9-721b-4e1d-96f2-9749e8e33543,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=8707aed9-721b-4e1d-96f2-9749e8e33543,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-pbq2l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c66ccbe2aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 identity=33734 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-pbq2l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c66ccbe2aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3280 identity=33734 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-pbq2l subsys=endpoint level=info msg="Successful endpoint creation" containerID=c66ccbe2aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3280 identity=33734 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-pbq2l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.119 ce58cfd6-c761-4c25-8655-839e5d5a1e2b default }" containerID=c13abfe2fa6f56b1f20d7e11ed9403c05627dbab4ffa14afa54ad91d5cd19357 datapathConfiguration="&{false false false false false }" interface=lxc0c5f1c82a404 k8sPodName=local-path-storage/helper-pod-create-pvc-cbbda180-76b5-4b09-a6e1-6facb6af8a97 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c13abfe2fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cbbda180-76b5-4b09-a6e1-6facb6af8a97 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c13abfe2fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cbbda180-76b5-4b09-a6e1-6facb6af8a97 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c13abfe2fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=10500 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cbbda180-76b5-4b09-a6e1-6facb6af8a97 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c13abfe2fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=10500 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cbbda180-76b5-4b09-a6e1-6facb6af8a97 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c13abfe2fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=294 identity=10500 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cbbda180-76b5-4b09-a6e1-6facb6af8a97 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c13abfe2fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=294 identity=10500 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cbbda180-76b5-4b09-a6e1-6facb6af8a97 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.122 81c0e695-d0c2-46ee-89d2-2eaa8c3cfa34 default }" containerID=f441328de4048a29de5a43a7881c91006738ea999eb7c8ad7d20d47c52485291 datapathConfiguration="&{false false false false false }" interface=lxca36b7ee58071 k8sPodName=local-path-storage/helper-pod-create-pvc-3ba49ba4-e8c8-4d34-b0c3-cf31374dbbb9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f441328de4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ba49ba4-e8c8-4d34-b0c3-cf31374dbbb9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f441328de4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ba49ba4-e8c8-4d34-b0c3-cf31374dbbb9 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f441328de4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identity=10500 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ba49ba4-e8c8-4d34-b0c3-cf31374dbbb9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f441328de4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identity=10500 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ba49ba4-e8c8-4d34-b0c3-cf31374dbbb9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f441328de4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=94 identity=10500 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ba49ba4-e8c8-4d34-b0c3-cf31374dbbb9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f441328de4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=94 identity=10500 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ba49ba4-e8c8-4d34-b0c3-cf31374dbbb9 subsys=daemon level=info msg="Delete endpoint request" containerID=c66ccbe2aa endpointID=3280 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-pbq2l subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=8707aed9-721b-4e1d-96f2-9749e8e33543 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=8707aed9-721b-4e1d-96f2-9749e8e33543 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=c66ccbe2aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3280 identity=33734 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-pbq2l subsys=endpoint level=info msg="Delete endpoint request" containerID=f441328de4 endpointID=94 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3ba49ba4-e8c8-4d34-b0c3-cf31374dbbb9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=c13abfe2fa endpointID=294 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-cbbda180-76b5-4b09-a6e1-6facb6af8a97 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f441328de4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=94 identity=10500 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ba49ba4-e8c8-4d34-b0c3-cf31374dbbb9 subsys=endpoint level=info msg="Removed endpoint" containerID=c13abfe2fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=294 identity=10500 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cbbda180-76b5-4b09-a6e1-6facb6af8a97 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 69c7f5da-3e72-4ae1-9cba-6b035493358d default }" containerID=9d87adaf0a75a0d835c7d07abbc79dd315f92aab135ed107322d94fc06eaaf6a datapathConfiguration="&{false false false false false }" interface=lxc4be53a8a1ece k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d87adaf0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d87adaf0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d87adaf0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identity=26696 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d87adaf0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identity=26696 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9d87adaf0a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1931 identity=26696 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d87adaf0a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1931 identity=26696 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.140 31c03905-7fd4-4fff-980c-d61aa6495fe7 default }" containerID=68ada7415dcb765ce214ded713bcc42d0041f589b18443994c180181e25b3a69 datapathConfiguration="&{false false false false false }" interface=lxcdac581269925 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68ada7415d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3354 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68ada7415d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3354 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68ada7415d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3354 identity=59383 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68ada7415d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3354 identity=59383 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68ada7415d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3354 identity=59383 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=68ada7415d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3354 identity=59383 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.144 d265daf6-efac-4d7b-b163-a5bf509cbad4 default }" containerID=24bb26f2bf512e05dd3f04ed9e23a6cb3ffa19f5abf4085a56e066d0a89c8a50 datapathConfiguration="&{false false false false false }" interface=lxcf49a28fda93e k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24bb26f2bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1936 ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24bb26f2bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1936 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.217 9e1eaf20-4f1e-45c4-bd63-54f6b8a65361 default }" containerID=2ac7dc952fe27d0d9323b99248bf4adc7bf7ccca66342b187c5a194e8e753baa datapathConfiguration="&{false false false false false }" interface=lxcd1898bb52258 k8sPodName=monitoring/loki-gateway-cf54cb88c-spbbx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ac7dc952f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2419 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-spbbx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ac7dc952f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2419 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-spbbx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=2ac7dc952f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2419 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-spbbx line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=24bb26f2bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1936 identity=27489 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24bb26f2bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1936 identity=27489 ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ac7dc952f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2419 identity=59086 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-spbbx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ac7dc952f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2419 identity=59086 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-spbbx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=24bb26f2bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1936 identity=27489 ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=24bb26f2bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1936 identity=27489 ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.129 bd7df35b-231a-4919-9b6f-c5417d94ec15 default }" containerID=dfc791ed3fe47143cf4424e45d435a3d54ccbe68235fab0c6e63376279128b92 datapathConfiguration="&{false false false false false }" interface=lxc5317e0bcf723 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dfc791ed3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dfc791ed3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.97 ebb40dff-2c29-4c85-a86e-da9cde47e83c default }" containerID=e76715d158394761f9a596576313d73f52990dbd6dabbe1e41594febe3c34071 datapathConfiguration="&{false false false false false }" interface=lxc0fbe9e4b698c k8sPodName=local-path-storage/helper-pod-create-pvc-78838952-6903-42d3-aacd-008abe08a322 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e76715d158 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78838952-6903-42d3-aacd-008abe08a322 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e76715d158 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78838952-6903-42d3-aacd-008abe08a322 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e76715d158 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 identity=10500 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78838952-6903-42d3-aacd-008abe08a322 oldIdentity="no identity" subsys=endpoint level=info msg="Identity of endpoint changed" containerID=dfc791ed3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 identity=33520 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e76715d158 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 identity=10500 ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78838952-6903-42d3-aacd-008abe08a322 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dfc791ed3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 identity=33520 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ac7dc952f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2419 identity=59086 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-spbbx subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ac7dc952f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2419 identity=59086 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-spbbx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e76715d158 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2627 identity=10500 ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78838952-6903-42d3-aacd-008abe08a322 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e76715d158 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2627 identity=10500 ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78838952-6903-42d3-aacd-008abe08a322 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dfc791ed3f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1135 identity=33520 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dfc791ed3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1135 identity=33520 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.29 f1059491-bc8f-465a-87d8-633569d9475f default }" containerID=3fb38e923b0544b181db2c539f67c734eeeb06370724d4e368b240aa86d8fc64 datapathConfiguration="&{false false false false false }" interface=lxc439199206abd k8sPodName=monitoring/vector-f585n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3fb38e923b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3181 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/vector-f585n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3fb38e923b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3181 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/vector-f585n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3fb38e923b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3181 identity=34976 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/vector-f585n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3fb38e923b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3181 identity=34976 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/vector-f585n subsys=endpoint level=info msg="Delete endpoint request" containerID=e76715d158 endpointID=2627 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-78838952-6903-42d3-aacd-008abe08a322 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e76715d158 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2627 identity=10500 ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78838952-6903-42d3-aacd-008abe08a322 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3fb38e923b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3181 identity=34976 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/vector-f585n subsys=endpoint level=info msg="Successful endpoint creation" containerID=3fb38e923b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3181 identity=34976 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/vector-f585n subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.30 a4dfd5c6-0a39-42a9-a9cb-bf159b7aeb45 default }" containerID=2a04061323b972710b355a960f08793df75ef17a196adc3b89f1e90a79e82197 datapathConfiguration="&{false false false false false }" interface=lxcb597e6e37295 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a04061323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a04061323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a04061323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 identity=29701 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a04061323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 identity=29701 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2a04061323 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=226 identity=29701 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a04061323 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=226 identity=29701 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.35 57d8451b-37cd-4f5b-87db-df3f04a07c8f default }" containerID=3b95da70b1ccf8d31d9266d2c3b9d65ab925ebf820c352f3e7ebbc2916222f7b datapathConfiguration="&{false false false false false }" interface=lxc0fca01802377 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-xgvhg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b95da70b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3632 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-xgvhg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b95da70b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3632 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-xgvhg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b95da70b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3632 identity=8409 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-xgvhg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b95da70b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3632 identity=8409 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-xgvhg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b95da70b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3632 identity=8409 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-xgvhg subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b95da70b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3632 identity=8409 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-xgvhg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.44 6aead42e-d795-4826-981a-75ec1fe4e902 default }" containerID=d99c0e3acab2c8c7f992621a17aab9b03d272de428ebe62ef98e819f9690e4e5 datapathConfiguration="&{false false false false false }" interface=lxc0a71b3d9acba k8sPodName=openstack/memcached-memcached-6479589586-9dz5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d99c0e3aca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-9dz5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d99c0e3aca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-9dz5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d99c0e3aca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.44 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-9dz5t line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d99c0e3aca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identity=8615 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-9dz5t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d99c0e3aca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identity=8615 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-9dz5t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d99c0e3aca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1241 identity=8615 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-9dz5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=d99c0e3aca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1241 identity=8615 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-9dz5t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.190 44b4f8b2-fb7b-46ef-bbc6-4ac06df2915e default }" containerID=59f9a36c2144231650be6615d91d0462861bd63e7bcf3960e7714da8bff823e2 datapathConfiguration="&{false false false false false }" interface=lxc092a62ce9374 k8sPodName=local-path-storage/helper-pod-create-pvc-2c8a3a30-cbe7-4e91-b0cf-a8888d64b022 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59f9a36c21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c8a3a30-cbe7-4e91-b0cf-a8888d64b022 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59f9a36c21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c8a3a30-cbe7-4e91-b0cf-a8888d64b022 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59f9a36c21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identity=10500 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c8a3a30-cbe7-4e91-b0cf-a8888d64b022 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59f9a36c21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identity=10500 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c8a3a30-cbe7-4e91-b0cf-a8888d64b022 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59f9a36c21 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=459 identity=10500 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c8a3a30-cbe7-4e91-b0cf-a8888d64b022 subsys=endpoint level=info msg="Successful endpoint creation" containerID=59f9a36c21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=459 identity=10500 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c8a3a30-cbe7-4e91-b0cf-a8888d64b022 subsys=daemon level=info msg="Delete endpoint request" containerID=59f9a36c21 endpointID=459 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2c8a3a30-cbe7-4e91-b0cf-a8888d64b022 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=59f9a36c21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=459 identity=10500 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c8a3a30-cbe7-4e91-b0cf-a8888d64b022 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 f6a01332-ed59-4cd7-a9c7-d67ead53bd49 default }" containerID=03697ededc65121c59b08960c59f8cf98f63b03b2e217b8ac7a687506aaa3712 datapathConfiguration="&{false false false false false }" interface=lxcf0430f9d6137 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03697ededc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03697ededc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03697ededc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identity=30791 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=03697ededc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identity=30791 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=03697ededc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=926 identity=30791 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=03697ededc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=926 identity=30791 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.194 6b54ec70-4f73-4117-a337-face55903d4f default }" containerID=3665fa55a4a4ee17271dbee400095d56505952958bff3a40308dcd807a2bc63d datapathConfiguration="&{false false false false false }" interface=lxc3305d1d63ae0 k8sPodName=openstack/keystone-api-7f8d9b88cc-tm2z2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3665fa55a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3218 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-7f8d9b88cc-tm2z2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3665fa55a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3218 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-7f8d9b88cc-tm2z2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3665fa55a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3218 identity=48275 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-7f8d9b88cc-tm2z2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3665fa55a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3218 identity=48275 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-7f8d9b88cc-tm2z2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 ee7abfe4-a49c-4375-972a-c5b7de9e498f default }" containerID=5519425904e646303e1d0f3853a047b5565cd32450e8c2729a933d9de5b92114 datapathConfiguration="&{false false false false false }" interface=lxc7c5ac641e476 k8sPodName=openstack/keystone-credential-setup-ps5kn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5519425904 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-credential-setup-ps5kn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5519425904 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e0437fe2-b2dc-4ab3-92a4-c35693c2d9a9,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=e0437fe2-b2dc-4ab3-92a4-c35693c2d9a9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-credential-setup-ps5kn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e0437fe2-b2dc-4ab3-92a4-c35693c2d9a9;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=e0437fe2-b2dc-4ab3-92a4-c35693c2d9a9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5519425904 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identity=3833 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e0437fe2-b2dc-4ab3-92a4-c35693c2d9a9,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=e0437fe2-b2dc-4ab3-92a4-c35693c2d9a9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-credential-setup-ps5kn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5519425904 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identity=3833 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-credential-setup-ps5kn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3665fa55a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3218 identity=48275 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-7f8d9b88cc-tm2z2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3665fa55a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3218 identity=48275 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-7f8d9b88cc-tm2z2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5519425904 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1922 identity=3833 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-credential-setup-ps5kn subsys=endpoint level=info msg="Successful endpoint creation" containerID=5519425904 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1922 identity=3833 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-credential-setup-ps5kn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5519425904 endpointID=1922 k8sNamespace=openstack k8sPodName=keystone-credential-setup-ps5kn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e0437fe2-b2dc-4ab3-92a4-c35693c2d9a9 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=e0437fe2-b2dc-4ab3-92a4-c35693c2d9a9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5519425904 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1922 identity=3833 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-credential-setup-ps5kn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 e9a5640f-663c-46c9-b661-3a7212f96358 default }" containerID=e291739328ae8f6953b42bcd35f1b4a31214e96674ebfce844b99cccae018156 datapathConfiguration="&{false false false false false }" interface=lxcb73829519b98 k8sPodName=openstack/keystone-db-init-wmbjs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e291739328 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-wmbjs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e291739328 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a33b08a4-1b7d-480c-a5bf-6fc929223a45,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a33b08a4-1b7d-480c-a5bf-6fc929223a45,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-wmbjs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a33b08a4-1b7d-480c-a5bf-6fc929223a45;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=a33b08a4-1b7d-480c-a5bf-6fc929223a45;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e291739328 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 identity=10887 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a33b08a4-1b7d-480c-a5bf-6fc929223a45,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a33b08a4-1b7d-480c-a5bf-6fc929223a45,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-wmbjs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e291739328 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 identity=10887 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-wmbjs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e291739328 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=768 identity=10887 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-wmbjs subsys=endpoint level=info msg="Successful endpoint creation" containerID=e291739328 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=768 identity=10887 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-wmbjs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e291739328 endpointID=768 k8sNamespace=openstack k8sPodName=keystone-db-init-wmbjs subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a33b08a4-1b7d-480c-a5bf-6fc929223a45 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=a33b08a4-1b7d-480c-a5bf-6fc929223a45 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e291739328 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=768 identity=10887 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-wmbjs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 230db529-e2bd-44c5-a41b-6781a2361c23 default }" containerID=32d6e0e75b0eb4b12139fa5472b68a78fed25667938bd472036cef23debff2bf datapathConfiguration="&{false false false false false }" interface=lxc2388f88c553f k8sPodName=openstack/keystone-fernet-setup-vxwwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=32d6e0e75b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-fernet-setup-vxwwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=32d6e0e75b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7a57ec82-0636-40bf-8616-de4b28e4e62a,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=7a57ec82-0636-40bf-8616-de4b28e4e62a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-fernet-setup-vxwwh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=32d6e0e75b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-fernet-setup-vxwwh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7a57ec82-0636-40bf-8616-de4b28e4e62a;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=7a57ec82-0636-40bf-8616-de4b28e4e62a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32d6e0e75b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identity=3433 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7a57ec82-0636-40bf-8616-de4b28e4e62a,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=7a57ec82-0636-40bf-8616-de4b28e4e62a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-fernet-setup-vxwwh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=32d6e0e75b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identity=3433 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-fernet-setup-vxwwh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=32d6e0e75b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=593 identity=3433 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-fernet-setup-vxwwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=32d6e0e75b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=593 identity=3433 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-fernet-setup-vxwwh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=32d6e0e75b endpointID=593 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-vxwwh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7a57ec82-0636-40bf-8616-de4b28e4e62a k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=7a57ec82-0636-40bf-8616-de4b28e4e62a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=32d6e0e75b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=593 identity=3433 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-fernet-setup-vxwwh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 21a3ea94-a962-4528-a02a-988410c70f2b default }" containerID=aef9ac530a3c95beece04b2b4c26a763b5db25034962c7cfed7c7d6feb4a1a5d datapathConfiguration="&{false false false false false }" interface=lxcb4266c6330c6 k8sPodName=openstack/keystone-db-sync-59ps2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aef9ac530a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-sync-59ps2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aef9ac530a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1b474abd-59f3-46d9-a2bf-2a863aeaa526,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=1b474abd-59f3-46d9-a2bf-2a863aeaa526,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-sync-59ps2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1b474abd-59f3-46d9-a2bf-2a863aeaa526;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=1b474abd-59f3-46d9-a2bf-2a863aeaa526;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aef9ac530a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 identity=53194 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1b474abd-59f3-46d9-a2bf-2a863aeaa526,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=1b474abd-59f3-46d9-a2bf-2a863aeaa526,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-sync-59ps2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aef9ac530a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 identity=53194 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-sync-59ps2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aef9ac530a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2582 identity=53194 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-sync-59ps2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aef9ac530a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2582 identity=53194 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-sync-59ps2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aef9ac530a endpointID=2582 k8sNamespace=openstack k8sPodName=keystone-db-sync-59ps2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1b474abd-59f3-46d9-a2bf-2a863aeaa526 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=1b474abd-59f3-46d9-a2bf-2a863aeaa526 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=aef9ac530a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2582 identity=53194 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-sync-59ps2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 960dfbe4-22dc-4fc5-bead-9384adaad383 default }" containerID=36ba45308d721716bc598f5e53cb25e2e25d00e4a86d8d03d66d07c169a82dd6 datapathConfiguration="&{false false false false false }" interface=lxcfb5a5e6e39d2 k8sPodName=openstack/keystone-rabbit-init-6h7ts labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36ba45308d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-rabbit-init-6h7ts subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36ba45308d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6ad03434-7101-41ba-b426-bdaa49809c51,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6ad03434-7101-41ba-b426-bdaa49809c51,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-rabbit-init-6h7ts subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6ad03434-7101-41ba-b426-bdaa49809c51;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=6ad03434-7101-41ba-b426-bdaa49809c51;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36ba45308d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identity=63626 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6ad03434-7101-41ba-b426-bdaa49809c51,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6ad03434-7101-41ba-b426-bdaa49809c51,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-rabbit-init-6h7ts oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=36ba45308d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identity=63626 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-rabbit-init-6h7ts subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36ba45308d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=740 identity=63626 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-rabbit-init-6h7ts subsys=endpoint level=info msg="Successful endpoint creation" containerID=36ba45308d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=740 identity=63626 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-rabbit-init-6h7ts subsys=daemon level=info msg="Delete endpoint request" containerID=36ba45308d endpointID=740 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-6h7ts subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6ad03434-7101-41ba-b426-bdaa49809c51 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=6ad03434-7101-41ba-b426-bdaa49809c51 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=36ba45308d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=740 identity=63626 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-rabbit-init-6h7ts subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 237ed8be-4074-4e97-9b36-51832400abc9 default }" containerID=0317248c2c487d839f7468e322493f2448b05259f24f11a0613d1fb720a9f7e4 datapathConfiguration="&{false false false false false }" interface=lxc171fbf641677 k8sPodName=openstack/keystone-domain-manage-2nfz9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0317248c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-domain-manage-2nfz9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0317248c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=66827bc1-462a-4b59-86a5-79e289350813,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=66827bc1-462a-4b59-86a5-79e289350813,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-domain-manage-2nfz9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0317248c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-domain-manage-2nfz9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=66827bc1-462a-4b59-86a5-79e289350813;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=66827bc1-462a-4b59-86a5-79e289350813;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0317248c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identity=9157 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=66827bc1-462a-4b59-86a5-79e289350813,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=66827bc1-462a-4b59-86a5-79e289350813,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-domain-manage-2nfz9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0317248c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identity=9157 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-domain-manage-2nfz9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0317248c2c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=227 identity=9157 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-domain-manage-2nfz9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0317248c2c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=227 identity=9157 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-domain-manage-2nfz9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03452730396201659 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=0317248c2c endpointID=227 k8sNamespace=openstack k8sPodName=keystone-domain-manage-2nfz9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=66827bc1-462a-4b59-86a5-79e289350813 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=66827bc1-462a-4b59-86a5-79e289350813 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0317248c2c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=227 identity=9157 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-domain-manage-2nfz9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 2213528d-5b9a-46e7-ae05-f58d5ce6bce8 default }" containerID=fb4a1d08ad3e1eb623268fc36b7fa983194eae7c87c64ae803614da861b7ff2e datapathConfiguration="&{false false false false false }" interface=lxce5d4bbaab624 k8sPodName=openstack/keystone-bootstrap-f8z9v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb4a1d08ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1745 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-bootstrap-f8z9v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb4a1d08ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1745 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3739108e-b64e-466d-870d-96dc4ccb33ad,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=3739108e-b64e-466d-870d-96dc4ccb33ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-bootstrap-f8z9v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3739108e-b64e-466d-870d-96dc4ccb33ad;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=3739108e-b64e-466d-870d-96dc4ccb33ad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb4a1d08ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1745 identity=41795 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3739108e-b64e-466d-870d-96dc4ccb33ad,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=3739108e-b64e-466d-870d-96dc4ccb33ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-bootstrap-f8z9v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb4a1d08ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1745 identity=41795 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-bootstrap-f8z9v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fb4a1d08ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1745 identity=41795 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-bootstrap-f8z9v subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb4a1d08ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1745 identity=41795 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-bootstrap-f8z9v subsys=daemon level=info msg="Delete endpoint request" containerID=fb4a1d08ad endpointID=1745 k8sNamespace=openstack k8sPodName=keystone-bootstrap-f8z9v subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3739108e-b64e-466d-870d-96dc4ccb33ad k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=3739108e-b64e-466d-870d-96dc4ccb33ad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fb4a1d08ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1745 identity=41795 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-bootstrap-f8z9v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 63bf26b5-83b4-4d85-bb54-3746be9839bd default }" containerID=163b9ef58ee9761f756c690ad489df56f247e7bdcb6b9ce7a5635374bb2b2c70 datapathConfiguration="&{false false false false false }" interface=lxc6446ed48c91f k8sPodName=local-path-storage/helper-pod-create-pvc-9fc31cb4-cbc3-46b3-bca2-0eef640fe372 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=163b9ef58e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1734 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9fc31cb4-cbc3-46b3-bca2-0eef640fe372 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=163b9ef58e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1734 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9fc31cb4-cbc3-46b3-bca2-0eef640fe372 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=163b9ef58e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1734 identity=10500 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9fc31cb4-cbc3-46b3-bca2-0eef640fe372 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=163b9ef58e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1734 identity=10500 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9fc31cb4-cbc3-46b3-bca2-0eef640fe372 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=163b9ef58e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1734 identity=10500 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9fc31cb4-cbc3-46b3-bca2-0eef640fe372 subsys=endpoint level=info msg="Successful endpoint creation" containerID=163b9ef58e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1734 identity=10500 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9fc31cb4-cbc3-46b3-bca2-0eef640fe372 subsys=daemon level=info msg="Delete endpoint request" containerID=163b9ef58e endpointID=1734 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9fc31cb4-cbc3-46b3-bca2-0eef640fe372 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=163b9ef58e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1734 identity=10500 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9fc31cb4-cbc3-46b3-bca2-0eef640fe372 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 b2a80c10-12c4-4e6a-b36a-06b05ce2d587 default }" containerID=1dfa490971769ff1227590552518264f7f5f1733ca7fed341f9810e2d0ba6c1d datapathConfiguration="&{false false false false false }" interface=lxc002ff47dd783 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1dfa490971 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1dfa490971 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1dfa490971 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identity=24053 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1dfa490971 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identity=24053 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1dfa490971 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=84 identity=24053 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1dfa490971 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=84 identity=24053 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.92 30d631cc-9b8b-477f-8bb6-c36bb5cd199c default }" containerID=77826af29e60c069f24a8d719adda0b4c045f4bbb3bfc7c2d7e71bc1df5615e2 datapathConfiguration="&{false false false false false }" interface=lxc61f9f4030399 k8sPodName=openstack/barbican-api-6cd5699b5d-jbwjl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77826af29e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-api-6cd5699b5d-jbwjl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77826af29e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-api-6cd5699b5d-jbwjl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77826af29e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 identity=41593 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-api-6cd5699b5d-jbwjl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=77826af29e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 identity=41593 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-api-6cd5699b5d-jbwjl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 e4e40460-4fe2-4161-bd00-d4d67f0bb5d8 default }" containerID=027143bc1076ea8f2f3ed8d9b51f756b2ee0dabafa81a2ce87d11edb361806bc datapathConfiguration="&{false false false false false }" interface=lxcce94982846b4 k8sPodName=openstack/barbican-db-init-844r9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=027143bc10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3093 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-init-844r9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=027143bc10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3093 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a499539c-dbab-43e6-90aa-cdfdd49bea01,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a499539c-dbab-43e6-90aa-cdfdd49bea01,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-init-844r9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a499539c-dbab-43e6-90aa-cdfdd49bea01;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=a499539c-dbab-43e6-90aa-cdfdd49bea01;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=027143bc10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3093 identity=65351 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a499539c-dbab-43e6-90aa-cdfdd49bea01,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a499539c-dbab-43e6-90aa-cdfdd49bea01,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-init-844r9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=027143bc10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3093 identity=65351 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-init-844r9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=77826af29e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=977 identity=41593 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-api-6cd5699b5d-jbwjl subsys=endpoint level=info msg="Successful endpoint creation" containerID=77826af29e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=977 identity=41593 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-api-6cd5699b5d-jbwjl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=027143bc10 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3093 identity=65351 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-init-844r9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=027143bc10 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3093 identity=65351 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-init-844r9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=027143bc10 endpointID=3093 k8sNamespace=openstack k8sPodName=barbican-db-init-844r9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a499539c-dbab-43e6-90aa-cdfdd49bea01 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=a499539c-dbab-43e6-90aa-cdfdd49bea01 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=027143bc10 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3093 identity=65351 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-init-844r9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 aa2ce905-420f-4eab-b113-702a634ac738 default }" containerID=ea1cfac49e6e37e48bd1dda34157bdcd0d32477ba4cf53c08e4ae9184e782176 datapathConfiguration="&{false false false false false }" interface=lxc38b7e4d22d33 k8sPodName=openstack/barbican-db-sync-lqhr7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea1cfac49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-db-sync-lqhr7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea1cfac49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3761497c-abd0-4106-84a8-76881ec454dc,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=3761497c-abd0-4106-84a8-76881ec454dc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-db-sync-lqhr7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3761497c-abd0-4106-84a8-76881ec454dc;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=3761497c-abd0-4106-84a8-76881ec454dc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ea1cfac49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identity=57529 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3761497c-abd0-4106-84a8-76881ec454dc,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=3761497c-abd0-4106-84a8-76881ec454dc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-db-sync-lqhr7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea1cfac49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identity=57529 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-db-sync-lqhr7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea1cfac49e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=514 identity=57529 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-db-sync-lqhr7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea1cfac49e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=514 identity=57529 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-db-sync-lqhr7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ea1cfac49e endpointID=514 k8sNamespace=openstack k8sPodName=barbican-db-sync-lqhr7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3761497c-abd0-4106-84a8-76881ec454dc k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=3761497c-abd0-4106-84a8-76881ec454dc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ea1cfac49e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=514 identity=57529 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-db-sync-lqhr7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 c7b92331-a9d2-4aee-a337-b35747c8f9ef default }" containerID=6b6d2a6328be857398021d7c91d3dd38368cf72edc6b0fe0e32f6b2372ed8514 datapathConfiguration="&{false false false false false }" interface=lxccdf6cd4a1af9 k8sPodName=openstack/barbican-rabbit-init-fz2nn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b6d2a6328 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-rabbit-init-fz2nn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b6d2a6328 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5c9f6c8e-c54a-444c-a23c-c0c3142684a1,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5c9f6c8e-c54a-444c-a23c-c0c3142684a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-rabbit-init-fz2nn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5c9f6c8e-c54a-444c-a23c-c0c3142684a1;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=5c9f6c8e-c54a-444c-a23c-c0c3142684a1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b6d2a6328 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 identity=9186 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5c9f6c8e-c54a-444c-a23c-c0c3142684a1,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5c9f6c8e-c54a-444c-a23c-c0c3142684a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-rabbit-init-fz2nn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b6d2a6328 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 identity=9186 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-rabbit-init-fz2nn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6b6d2a6328 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2462 identity=9186 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-rabbit-init-fz2nn subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b6d2a6328 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2462 identity=9186 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-rabbit-init-fz2nn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6b6d2a6328 endpointID=2462 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-fz2nn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5c9f6c8e-c54a-444c-a23c-c0c3142684a1 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=5c9f6c8e-c54a-444c-a23c-c0c3142684a1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6b6d2a6328 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2462 identity=9186 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-rabbit-init-fz2nn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 255dec50-7b61-4165-a0c1-e0d6cec3896c default }" containerID=66dc993592f9f27559bdb709738a7449919d078c3d060f480812aaa0f286a6f2 datapathConfiguration="&{false false false false false }" interface=lxcf4e5c9b6a85b k8sPodName=openstack/barbican-ks-service-czprl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66dc993592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4050 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/barbican-ks-service-czprl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66dc993592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4050 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2368793a-7ef1-4c6c-bd05-590dac591d5b,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=2368793a-7ef1-4c6c-bd05-590dac591d5b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/barbican-ks-service-czprl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2368793a-7ef1-4c6c-bd05-590dac591d5b;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=2368793a-7ef1-4c6c-bd05-590dac591d5b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66dc993592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4050 identity=61113 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2368793a-7ef1-4c6c-bd05-590dac591d5b,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=2368793a-7ef1-4c6c-bd05-590dac591d5b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/barbican-ks-service-czprl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66dc993592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4050 identity=61113 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/barbican-ks-service-czprl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66dc993592 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4050 identity=61113 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/barbican-ks-service-czprl subsys=endpoint level=info msg="Successful endpoint creation" containerID=66dc993592 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4050 identity=61113 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/barbican-ks-service-czprl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=66dc993592 endpointID=4050 k8sNamespace=openstack k8sPodName=barbican-ks-service-czprl subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2368793a-7ef1-4c6c-bd05-590dac591d5b k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=2368793a-7ef1-4c6c-bd05-590dac591d5b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=66dc993592 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4050 identity=61113 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/barbican-ks-service-czprl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 60525ddd-b38b-4850-8f12-aa4605e46894 default }" containerID=acb4c4b0848c47faa85536046da52672af0bb85720ae9079d983e669615ccffc datapathConfiguration="&{false false false false false }" interface=lxc87231e338656 k8sPodName=openstack/barbican-ks-endpoints-h72bs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=acb4c4b084 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h72bs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=acb4c4b084 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3638c01f-6f4c-431b-897a-38e8e5c82dd3,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3638c01f-6f4c-431b-897a-38e8e5c82dd3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h72bs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3638c01f-6f4c-431b-897a-38e8e5c82dd3;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3638c01f-6f4c-431b-897a-38e8e5c82dd3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=acb4c4b084 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 identity=29235 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3638c01f-6f4c-431b-897a-38e8e5c82dd3,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3638c01f-6f4c-431b-897a-38e8e5c82dd3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h72bs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=acb4c4b084 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 identity=29235 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h72bs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=acb4c4b084 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1516 identity=29235 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h72bs subsys=endpoint level=info msg="Successful endpoint creation" containerID=acb4c4b084 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1516 identity=29235 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h72bs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=acb4c4b084 endpointID=1516 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-h72bs subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3638c01f-6f4c-431b-897a-38e8e5c82dd3 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3638c01f-6f4c-431b-897a-38e8e5c82dd3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=acb4c4b084 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1516 identity=29235 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h72bs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 2284c3f5-587c-420c-9026-03cd14972981 default }" containerID=98ebf0714f3d14f7bd8163c6cd76d4f92588a3190c2771bcee7ea5074f85735d datapathConfiguration="&{false false false false false }" interface=lxcfe2c5af2ddab k8sPodName=openstack/barbican-ks-user-fx4p4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98ebf0714f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-ks-user-fx4p4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98ebf0714f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1a5f2583-7021-45c6-9988-5faf4871a75b,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=1a5f2583-7021-45c6-9988-5faf4871a75b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-ks-user-fx4p4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1a5f2583-7021-45c6-9988-5faf4871a75b;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=1a5f2583-7021-45c6-9988-5faf4871a75b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98ebf0714f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 identity=12108 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1a5f2583-7021-45c6-9988-5faf4871a75b,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=1a5f2583-7021-45c6-9988-5faf4871a75b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-ks-user-fx4p4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98ebf0714f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 identity=12108 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-ks-user-fx4p4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98ebf0714f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=550 identity=12108 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-ks-user-fx4p4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=98ebf0714f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=550 identity=12108 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-ks-user-fx4p4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=98ebf0714f endpointID=550 k8sNamespace=openstack k8sPodName=barbican-ks-user-fx4p4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1a5f2583-7021-45c6-9988-5faf4871a75b k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=1a5f2583-7021-45c6-9988-5faf4871a75b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=98ebf0714f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=550 identity=12108 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-ks-user-fx4p4 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.19 2d45a714-5fb9-4225-9eec-1b0c9511d3e0 default }" containerID=3fed9bef4d50c98393ecfa3cdcef6f3deeab363bc7308873931d5e3eaf0e1244 datapathConfiguration="&{false false false false false }" interface=lxcc9ee1e0512a4 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2b7jj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3fed9bef4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1808 ipv4=10.0.0.19 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2b7jj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3fed9bef4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1808 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.19 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2b7jj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3fed9bef4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1808 identity=37292 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.19 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2b7jj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3fed9bef4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1808 identity=37292 ipv4=10.0.0.19 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2b7jj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3fed9bef4d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1808 identity=37292 ipv4=10.0.0.19 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2b7jj subsys=endpoint level=info msg="Successful endpoint creation" containerID=3fed9bef4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1808 identity=37292 ipv4=10.0.0.19 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2b7jj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.60 61a3cf09-82dd-49ca-b614-0bd9186ef567 default }" containerID=d7eb0440af121f2710cce4bd62a1ea2a0d2ff88b33a30300c1684dc357dee08b datapathConfiguration="&{false false false false false }" interface=lxcca51d7850e97 k8sPodName=openstack/rook-ceph-detect-version-vgpnq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7eb0440af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vgpnq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7eb0440af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=16b4162b-7a43-4297-9c5a-ca3b4cb1d844,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=16b4162b-7a43-4297-9c5a-ca3b4cb1d844,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vgpnq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=16b4162b-7a43-4297-9c5a-ca3b4cb1d844;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=16b4162b-7a43-4297-9c5a-ca3b4cb1d844;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d7eb0440af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vgpnq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d7eb0440af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identity=7811 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=16b4162b-7a43-4297-9c5a-ca3b4cb1d844,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=16b4162b-7a43-4297-9c5a-ca3b4cb1d844,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vgpnq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7eb0440af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identity=7811 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vgpnq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7eb0440af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1431 identity=7811 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vgpnq subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7eb0440af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1431 identity=7811 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vgpnq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d7eb0440af endpointID=1431 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-vgpnq subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=16b4162b-7a43-4297-9c5a-ca3b4cb1d844 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=16b4162b-7a43-4297-9c5a-ca3b4cb1d844 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=d7eb0440af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1431 identity=7811 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vgpnq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 8a631263-3fe2-4686-b6a5-f5d2c1339e77 default }" containerID=ff08efbd2a8f92d02f9ca5dd0611d27f0630a656904566861f8c8afba582b324 datapathConfiguration="&{false false false false false }" interface=lxc13774bce7b54 k8sPodName=openstack/ceph-object-controller-detect-version-ztt7r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff08efbd2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1545 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ztt7r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff08efbd2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1545 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=15ce4fb0-0b4a-4467-b042-066ccdbe165c,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=15ce4fb0-0b4a-4467-b042-066ccdbe165c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ztt7r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=15ce4fb0-0b4a-4467-b042-066ccdbe165c;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=15ce4fb0-0b4a-4467-b042-066ccdbe165c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff08efbd2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1545 identity=12218 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=15ce4fb0-0b4a-4467-b042-066ccdbe165c,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=15ce4fb0-0b4a-4467-b042-066ccdbe165c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ztt7r oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ff08efbd2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1545 identity=12218 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ztt7r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff08efbd2a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1545 identity=12218 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ztt7r subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff08efbd2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1545 identity=12218 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ztt7r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ff08efbd2a endpointID=1545 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-ztt7r subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=15ce4fb0-0b4a-4467-b042-066ccdbe165c k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=15ce4fb0-0b4a-4467-b042-066ccdbe165c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=ff08efbd2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1545 identity=12218 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ztt7r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 73f78a94-ef8d-42ae-9913-e499589b8464 default }" containerID=39c604fbba1b8cdf436eb5bab5662d939808617c4c4c27e8973af4fecd6dc214 datapathConfiguration="&{false false false false false }" interface=lxc3228c4a2a9d4 k8sPodName=local-path-storage/helper-pod-create-pvc-e5376221-7395-457f-90ff-b8f37b00280b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39c604fbba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5376221-7395-457f-90ff-b8f37b00280b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39c604fbba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5376221-7395-457f-90ff-b8f37b00280b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39c604fbba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 identity=10500 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5376221-7395-457f-90ff-b8f37b00280b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39c604fbba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 identity=10500 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5376221-7395-457f-90ff-b8f37b00280b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39c604fbba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2460 identity=10500 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5376221-7395-457f-90ff-b8f37b00280b subsys=endpoint level=info msg="Successful endpoint creation" containerID=39c604fbba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2460 identity=10500 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5376221-7395-457f-90ff-b8f37b00280b subsys=daemon level=info msg="Delete endpoint request" containerID=39c604fbba endpointID=2460 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e5376221-7395-457f-90ff-b8f37b00280b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=39c604fbba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2460 identity=10500 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5376221-7395-457f-90ff-b8f37b00280b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 d240106a-f190-4de2-b5f6-c153240ba384 default }" containerID=d160500ac49e9e638df093c9bd2edc8bcc746234fc7ded68a7e66766ad12fe08 datapathConfiguration="&{false false false false false }" interface=lxc0f58e6a55f3b k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d160500ac4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d160500ac4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d160500ac4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d160500ac4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identity=9501 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d160500ac4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identity=9501 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d160500ac4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=986 identity=9501 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d160500ac4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=986 identity=9501 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.187 5338dbbd-1ed0-4f63-a448-2862a447fdef default }" containerID=445455b4efa8004757dbcd4210c5a39c754543442c105b1c88de4ef580b89914 datapathConfiguration="&{false false false false false }" interface=lxc56afe1b74a38 k8sPodName=openstack/glance-db-init-dfl26 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=445455b4ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3336 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-db-init-dfl26 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=445455b4ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3336 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9053dd67-6fba-4091-8f3d-f995ec32e001,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=9053dd67-6fba-4091-8f3d-f995ec32e001,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-db-init-dfl26 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=445455b4ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3336 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-db-init-dfl26 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9053dd67-6fba-4091-8f3d-f995ec32e001;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=9053dd67-6fba-4091-8f3d-f995ec32e001;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=445455b4ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3336 identity=9695 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9053dd67-6fba-4091-8f3d-f995ec32e001,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=9053dd67-6fba-4091-8f3d-f995ec32e001,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-db-init-dfl26 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=445455b4ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3336 identity=9695 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-db-init-dfl26 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=445455b4ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3336 identity=9695 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-db-init-dfl26 subsys=endpoint level=info msg="Successful endpoint creation" containerID=445455b4ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3336 identity=9695 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-db-init-dfl26 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=445455b4ef endpointID=3336 k8sNamespace=openstack k8sPodName=glance-db-init-dfl26 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9053dd67-6fba-4091-8f3d-f995ec32e001 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=9053dd67-6fba-4091-8f3d-f995ec32e001 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=445455b4ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3336 identity=9695 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/glance-db-init-dfl26 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 f1c69acd-2276-4543-80d6-4c4e6fb76400 default }" containerID=78f6c3afc00f4a001a891e6ca13aa7998f1827d663d5d9b85c5508b39c417c19 datapathConfiguration="&{false false false false false }" interface=lxc3eeb2fc2d54a k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p9wjg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78f6c3afc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3854 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p9wjg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78f6c3afc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3854 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p9wjg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78f6c3afc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3854 identity=29941 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p9wjg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78f6c3afc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3854 identity=29941 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p9wjg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.17 98ec516f-8d1f-48fb-b4b6-f4ab7e576ab8 default }" containerID=20b288e66cd016be888c6639b9ba9fa75a6661c811802015e2de2c4edf03aea2 datapathConfiguration="&{false false false false false }" interface=lxcf4321c419b38 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5x9p5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20b288e66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1576 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5x9p5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20b288e66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1576 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5x9p5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20b288e66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1576 identity=59929 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5x9p5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20b288e66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1576 identity=59929 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5x9p5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=78f6c3afc0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3854 identity=29941 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p9wjg subsys=endpoint level=info msg="Successful endpoint creation" containerID=78f6c3afc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3854 identity=29941 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p9wjg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=20b288e66c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1576 identity=59929 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5x9p5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=20b288e66c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1576 identity=59929 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5x9p5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.235 3b042bee-f2c6-45cd-a5b3-df118773d7ce default }" containerID=f122b05ecaf67d9ecbfe16e72c18d64f52c9982c7323011e9f3c346a5d4be9f0 datapathConfiguration="&{false false false false false }" interface=lxc383e2f45b28d k8sPodName=openstack/glance-db-sync-4kdr4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f122b05eca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3760 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-db-sync-4kdr4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f122b05eca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3760 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c78d71ad-32af-4c5a-8505-ef68c0471b3e,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=c78d71ad-32af-4c5a-8505-ef68c0471b3e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-db-sync-4kdr4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c78d71ad-32af-4c5a-8505-ef68c0471b3e;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=c78d71ad-32af-4c5a-8505-ef68c0471b3e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f122b05eca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3760 identity=9477 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c78d71ad-32af-4c5a-8505-ef68c0471b3e,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=c78d71ad-32af-4c5a-8505-ef68c0471b3e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-db-sync-4kdr4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f122b05eca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3760 identity=9477 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-db-sync-4kdr4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f122b05eca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3760 identity=9477 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-db-sync-4kdr4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f122b05eca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3760 identity=9477 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-db-sync-4kdr4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f122b05eca endpointID=3760 k8sNamespace=openstack k8sPodName=glance-db-sync-4kdr4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c78d71ad-32af-4c5a-8505-ef68c0471b3e k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=c78d71ad-32af-4c5a-8505-ef68c0471b3e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f122b05eca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3760 identity=9477 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-db-sync-4kdr4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 6413b5a7-66e4-4462-8a32-37c4bf497601 default }" containerID=2ea69a42092db3d9e73bb4e13b1d462a84d670937a4723118c61a858e67b2cba datapathConfiguration="&{false false false false false }" interface=lxca466641fd2b7 k8sPodName=openstack/glance-rabbit-init-x9z6w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ea69a4209 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-rabbit-init-x9z6w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ea69a4209 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d867244b-ec6b-4b62-8a5d-2b1170d17ec1,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d867244b-ec6b-4b62-8a5d-2b1170d17ec1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-rabbit-init-x9z6w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d867244b-ec6b-4b62-8a5d-2b1170d17ec1;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d867244b-ec6b-4b62-8a5d-2b1170d17ec1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ea69a4209 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identity=19642 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d867244b-ec6b-4b62-8a5d-2b1170d17ec1,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d867244b-ec6b-4b62-8a5d-2b1170d17ec1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-rabbit-init-x9z6w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ea69a4209 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identity=19642 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-rabbit-init-x9z6w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2ea69a4209 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3090 identity=19642 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-rabbit-init-x9z6w subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ea69a4209 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3090 identity=19642 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-rabbit-init-x9z6w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2ea69a4209 endpointID=3090 k8sNamespace=openstack k8sPodName=glance-rabbit-init-x9z6w subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d867244b-ec6b-4b62-8a5d-2b1170d17ec1 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d867244b-ec6b-4b62-8a5d-2b1170d17ec1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2ea69a4209 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3090 identity=19642 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-rabbit-init-x9z6w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 426b1968-af99-48ee-8fa9-3877f62d3f08 default }" containerID=7bf84d8bffd3845ba12abdcc824ece2d77760284b886dfae3287cb1d2588ee18 datapathConfiguration="&{false false false false false }" interface=lxc009cf101a953 k8sPodName=openstack/glance-ks-service-vfjg8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7bf84d8bff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-ks-service-vfjg8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7bf84d8bff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e9bf3100-38bb-4723-b6f7-1a4717dfebe8,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=e9bf3100-38bb-4723-b6f7-1a4717dfebe8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-ks-service-vfjg8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e9bf3100-38bb-4723-b6f7-1a4717dfebe8;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=e9bf3100-38bb-4723-b6f7-1a4717dfebe8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7bf84d8bff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identity=10337 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e9bf3100-38bb-4723-b6f7-1a4717dfebe8,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=e9bf3100-38bb-4723-b6f7-1a4717dfebe8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-ks-service-vfjg8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7bf84d8bff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identity=10337 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-ks-service-vfjg8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7bf84d8bff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=339 identity=10337 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-ks-service-vfjg8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7bf84d8bff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=339 identity=10337 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-ks-service-vfjg8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7bf84d8bff endpointID=339 k8sNamespace=openstack k8sPodName=glance-ks-service-vfjg8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e9bf3100-38bb-4723-b6f7-1a4717dfebe8 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=e9bf3100-38bb-4723-b6f7-1a4717dfebe8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7bf84d8bff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=339 identity=10337 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-ks-service-vfjg8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 2ee0470f-abe5-4b60-911e-cacd8d2a268c default }" containerID=1e4bd27f26122ae86f1519a733280ba142859ac7d1c42b91c422507a41a5a99d datapathConfiguration="&{false false false false false }" interface=lxc60060bcaed1e k8sPodName=openstack/glance-ks-endpoints-vdwlm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e4bd27f26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1600 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-ks-endpoints-vdwlm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e4bd27f26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1600 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fc16d94a-0372-448f-9a75-41f8aa9ee963,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=fc16d94a-0372-448f-9a75-41f8aa9ee963,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-ks-endpoints-vdwlm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fc16d94a-0372-448f-9a75-41f8aa9ee963;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=fc16d94a-0372-448f-9a75-41f8aa9ee963;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1e4bd27f26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1600 identity=4594 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fc16d94a-0372-448f-9a75-41f8aa9ee963,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=fc16d94a-0372-448f-9a75-41f8aa9ee963,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-ks-endpoints-vdwlm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e4bd27f26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1600 identity=4594 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-ks-endpoints-vdwlm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e4bd27f26 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1600 identity=4594 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-ks-endpoints-vdwlm subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e4bd27f26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1600 identity=4594 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-ks-endpoints-vdwlm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1e4bd27f26 endpointID=1600 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-vdwlm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fc16d94a-0372-448f-9a75-41f8aa9ee963 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=fc16d94a-0372-448f-9a75-41f8aa9ee963 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1e4bd27f26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1600 identity=4594 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-ks-endpoints-vdwlm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 0ce5b6dd-1284-4c45-b367-6f19f54f1838 default }" containerID=7089b3c8811f5401e62803814f25c84b887f0e9f3bb8d1a996a98d09633b6ee4 datapathConfiguration="&{false false false false false }" interface=lxc5df3b94f5ff7 k8sPodName=openstack/glance-ks-user-k8w9j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7089b3c881 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-ks-user-k8w9j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7089b3c881 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d7a25920-86d8-440f-ac6e-38ffec11c4ab,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d7a25920-86d8-440f-ac6e-38ffec11c4ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-ks-user-k8w9j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d7a25920-86d8-440f-ac6e-38ffec11c4ab;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=d7a25920-86d8-440f-ac6e-38ffec11c4ab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7089b3c881 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=58057 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d7a25920-86d8-440f-ac6e-38ffec11c4ab,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d7a25920-86d8-440f-ac6e-38ffec11c4ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-ks-user-k8w9j oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7089b3c881 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=58057 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-ks-user-k8w9j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7089b3c881 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=555 identity=58057 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-ks-user-k8w9j subsys=endpoint level=info msg="Successful endpoint creation" containerID=7089b3c881 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=555 identity=58057 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-ks-user-k8w9j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7089b3c881 endpointID=555 k8sNamespace=openstack k8sPodName=glance-ks-user-k8w9j subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d7a25920-86d8-440f-ac6e-38ffec11c4ab k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=d7a25920-86d8-440f-ac6e-38ffec11c4ab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7089b3c881 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=555 identity=58057 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/glance-ks-user-k8w9j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 d089f328-c741-4dfd-8031-8a69398e8fdd default }" containerID=3e354ab51233d674d5c46c04bbe4fb7a6f51a377c523471e800f1aa35f88a7e4 datapathConfiguration="&{false false false false false }" interface=lxcc1715aa2f7be k8sPodName=openstack/glance-metadefs-load-4rkxb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e354ab512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-4rkxb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e354ab512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bcdd270c-822d-47e9-9a0b-602c9cbf9c3a,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=bcdd270c-822d-47e9-9a0b-602c9cbf9c3a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-4rkxb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bcdd270c-822d-47e9-9a0b-602c9cbf9c3a;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=bcdd270c-822d-47e9-9a0b-602c9cbf9c3a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e354ab512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identity=26909 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bcdd270c-822d-47e9-9a0b-602c9cbf9c3a,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=bcdd270c-822d-47e9-9a0b-602c9cbf9c3a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-4rkxb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e354ab512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identity=26909 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-4rkxb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3e354ab512 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=391 identity=26909 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-4rkxb subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e354ab512 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=391 identity=26909 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-4rkxb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3e354ab512 endpointID=391 k8sNamespace=openstack k8sPodName=glance-metadefs-load-4rkxb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bcdd270c-822d-47e9-9a0b-602c9cbf9c3a k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=bcdd270c-822d-47e9-9a0b-602c9cbf9c3a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3e354ab512 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=391 identity=26909 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-4rkxb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 c73bb346-7925-433b-9294-ea196cfd83d7 default }" containerID=9573b673de0ec5073483e8e7ed60ae2cf8d8070ebaa8acbb18246cc915f2ff1a datapathConfiguration="&{false false false false false }" interface=lxc3d1dda14c2bd k8sPodName=openstack/glance-storage-init-xj2b4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9573b673de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3410 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-storage-init-xj2b4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9573b673de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3410 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bee7e185-e1a7-49b9-b51f-c0a41583993a,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=bee7e185-e1a7-49b9-b51f-c0a41583993a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-storage-init-xj2b4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bee7e185-e1a7-49b9-b51f-c0a41583993a;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=bee7e185-e1a7-49b9-b51f-c0a41583993a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9573b673de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3410 identity=61098 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bee7e185-e1a7-49b9-b51f-c0a41583993a,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=bee7e185-e1a7-49b9-b51f-c0a41583993a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-storage-init-xj2b4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9573b673de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3410 identity=61098 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-storage-init-xj2b4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9573b673de datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3410 identity=61098 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-storage-init-xj2b4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9573b673de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3410 identity=61098 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-storage-init-xj2b4 subsys=daemon level=info msg="Delete endpoint request" containerID=9573b673de endpointID=3410 k8sNamespace=openstack k8sPodName=glance-storage-init-xj2b4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bee7e185-e1a7-49b9-b51f-c0a41583993a k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=bee7e185-e1a7-49b9-b51f-c0a41583993a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9573b673de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3410 identity=61098 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-storage-init-xj2b4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 75ef22a4-7c13-497d-b2d9-dd82ed80407f default }" containerID=f66093713c66c601a547f2e945098f055ecb05a9cf8bcaba25045f2a9f7ea22e datapathConfiguration="&{false false false false false }" interface=lxca69c896d15f9 k8sPodName=openstack/glance-api-5bd9444b47-947r8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f66093713c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2270 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-api-5bd9444b47-947r8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f66093713c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2270 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-api-5bd9444b47-947r8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f66093713c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2270 identity=16548 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-api-5bd9444b47-947r8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f66093713c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2270 identity=16548 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-api-5bd9444b47-947r8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f66093713c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2270 identity=16548 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-api-5bd9444b47-947r8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f66093713c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2270 identity=16548 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-api-5bd9444b47-947r8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.212 e31dd6c3-bc6c-4b74-b175-a6f7b5ef03d0 default }" containerID=c48d22759e83c7de1f3b3cd6763f9d7a30efda23b71f76eaa9222cf31a821388 datapathConfiguration="&{false false false false false }" interface=lxce24c7b2c51f6 k8sPodName=openstack/staffeln-db-init-gtn5g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c48d22759e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2649 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-init-gtn5g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c48d22759e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2649 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=14c9c340-ca42-407d-bb32-0b0421b3a37a,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=14c9c340-ca42-407d-bb32-0b0421b3a37a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-init-gtn5g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=14c9c340-ca42-407d-bb32-0b0421b3a37a;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=14c9c340-ca42-407d-bb32-0b0421b3a37a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c48d22759e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2649 identity=5116 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=14c9c340-ca42-407d-bb32-0b0421b3a37a,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=14c9c340-ca42-407d-bb32-0b0421b3a37a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-init-gtn5g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c48d22759e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2649 identity=5116 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-init-gtn5g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c48d22759e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2649 identity=5116 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-init-gtn5g subsys=endpoint level=info msg="Successful endpoint creation" containerID=c48d22759e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2649 identity=5116 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-init-gtn5g subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.235 8189d841-8a8c-4a4b-897d-f588e1cacfec default }" containerID=b823a01be4b83d9b88406c4a372b7cf299ffb74dcb7c5691cf9f05790b568624 datapathConfiguration="&{false false false false false }" interface=lxca4cc597cfd28 k8sPodName=openstack/staffeln-conductor-7c99f78d6d-rmb8d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b823a01be4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2096 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/staffeln-conductor-7c99f78d6d-rmb8d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b823a01be4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2096 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/staffeln-conductor-7c99f78d6d-rmb8d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b823a01be4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2096 identity=2760 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/staffeln-conductor-7c99f78d6d-rmb8d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b823a01be4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2096 identity=2760 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/staffeln-conductor-7c99f78d6d-rmb8d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 4d9a7376-9abc-4dbe-a603-2541aa08d859 default }" containerID=888283d07557879e630140f080984abe6978a2d0a60537763d66699fed5d8a3d datapathConfiguration="&{false false false false false }" interface=lxc8b4c88945710 k8sPodName=openstack/staffeln-api-7456cbbb7-mlv6g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=888283d075 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=622 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-api-7456cbbb7-mlv6g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=888283d075 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=622 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-api-7456cbbb7-mlv6g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=888283d075 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=622 identity=51317 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-api-7456cbbb7-mlv6g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=888283d075 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=622 identity=51317 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-api-7456cbbb7-mlv6g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b823a01be4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2096 identity=2760 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/staffeln-conductor-7c99f78d6d-rmb8d subsys=endpoint level=info msg="Successful endpoint creation" containerID=b823a01be4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2096 identity=2760 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/staffeln-conductor-7c99f78d6d-rmb8d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=888283d075 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=622 identity=51317 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-api-7456cbbb7-mlv6g subsys=endpoint level=info msg="Successful endpoint creation" containerID=888283d075 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=622 identity=51317 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-api-7456cbbb7-mlv6g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c48d22759e endpointID=2649 k8sNamespace=openstack k8sPodName=staffeln-db-init-gtn5g subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=14c9c340-ca42-407d-bb32-0b0421b3a37a k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=14c9c340-ca42-407d-bb32-0b0421b3a37a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=c48d22759e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2649 identity=5116 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/staffeln-db-init-gtn5g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 7673d284-2fb2-408d-89a8-522af9cc1a39 default }" containerID=ff7bc704dce8647a764fa90fbe8dbe6ffb4fbe39d2715b741769093bbd4be85e datapathConfiguration="&{false false false false false }" interface=lxcafd8829a7c94 k8sPodName=openstack/staffeln-db-sync-qgd4s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff7bc704dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-sync-qgd4s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff7bc704dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b987a030-2d11-4a0b-bb84-9386adf913b5,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=b987a030-2d11-4a0b-bb84-9386adf913b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-sync-qgd4s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=b987a030-2d11-4a0b-bb84-9386adf913b5;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=b987a030-2d11-4a0b-bb84-9386adf913b5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ff7bc704dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identity=42366 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b987a030-2d11-4a0b-bb84-9386adf913b5,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=b987a030-2d11-4a0b-bb84-9386adf913b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-sync-qgd4s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff7bc704dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identity=42366 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-sync-qgd4s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff7bc704dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=393 identity=42366 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-sync-qgd4s subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff7bc704dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=393 identity=42366 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-sync-qgd4s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager