level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.073671ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="58.461µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.046409ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.501µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=99.640522ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.791µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="24.291µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="72.622µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="58.891µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="85.322µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="412.538µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="3.501µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=8.94399ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=4.601936ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="26.86µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="28.83µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="190.133µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="85.792µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="61.681µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=53.027981ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="93.933µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="4.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.153.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.310421ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.167881ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="12.051µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.598248ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="13.41µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.4µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.4µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="22.39µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="14.87µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="85.961µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="264.926µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="1.8µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.81µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="206.654µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="772.634µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.163243ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="2.75µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="19.14µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.153 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.153 ipAddr.ipv6="" k8sNodeIP=199.19.213.153 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.153" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.127" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.153" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.153} {CiliumInternalIP 10.0.0.127}] 10.0.0.0/24 [] [] 10.0.0.58 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:34753" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.573897552s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="21.88µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="6.18µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="39.411µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="4.65µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2696 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2696 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2696 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.643882869s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=294.386349ms file-path=/var/run/cilium/state/templates/04a10f0228e4d7d841740a3723d18abc81ca379428f97a770fd24599e351d042/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2696 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 17cb55c7-ef9b-490c-8398-46f8d9bd5562 default }" containerID=8bd188f0721e9d00c32454c65ac0fbc32e1baa3ff1b4e942503e9640f9ab09e5 datapathConfiguration="&{false false false false false }" interface=lxc0df29b92e10e k8sPodName=kube-system/coredns-7c96b6546b-2gjh6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8bd188f072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2gjh6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8bd188f072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2gjh6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.10 ccb11341-9f7d-4a59-903e-512c0fbeb20c default }" containerID=ac5f1cdb4459f89896b4356148f50807590c1328d8b81810187adbe6e5b7748c datapathConfiguration="&{false false false false false }" interface=lxc926e969ce2af k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rscdl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac5f1cdb44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 ipv4=10.0.0.10 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rscdl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac5f1cdb44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=8be03d91-0db8-48fd-8c64-2c586e29ded4,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=8be03d91-0db8-48fd-8c64-2c586e29ded4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.10 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rscdl subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8bd188f072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identity=11597 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2gjh6 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ac5f1cdb44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.10 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rscdl line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8bd188f072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identity=11597 ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2gjh6 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=8be03d91-0db8-48fd-8c64-2c586e29ded4;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=8be03d91-0db8-48fd-8c64-2c586e29ded4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac5f1cdb44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 identity=35061 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=8be03d91-0db8-48fd-8c64-2c586e29ded4,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=8be03d91-0db8-48fd-8c64-2c586e29ded4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.10 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rscdl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac5f1cdb44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 identity=35061 ipv4=10.0.0.10 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rscdl subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 ipv4=10.0.0.58 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 identityLabels="reserved:health" ipv4=10.0.0.58 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 identity=4 identityLabels="reserved:health" ipv4=10.0.0.58 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.046692607s file-path=/var/run/cilium/state/templates/81e59e5267f5659fc2984174a4d10a2e14aa6d6b6ffb7ec0ffd3908be6719820/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=835 identity=4 ipv4=10.0.0.58 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8bd188f072 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=117 identity=11597 ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2gjh6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8bd188f072 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=117 identity=11597 ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2gjh6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ac5f1cdb44 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=241 identity=35061 ipv4=10.0.0.10 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rscdl subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac5f1cdb44 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=241 identity=35061 ipv4=10.0.0.10 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rscdl subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ac5f1cdb44 endpointID=241 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-rscdl subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=8be03d91-0db8-48fd-8c64-2c586e29ded4 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=8be03d91-0db8-48fd-8c64-2c586e29ded4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=ac5f1cdb44 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=241 identity=35061 ipv4=10.0.0.10 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rscdl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 f1a6d45f-beec-4e2c-8855-48c994ade3d0 default }" containerID=3ac4bc95941bb1ba7ddcc6a81e7feeca71596ca847a3f141a358a4809addb678 datapathConfiguration="&{false false false false false }" interface=lxcd0014e18364f k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tdv44 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ac4bc9594 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1003 ipv4=10.0.0.52 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tdv44 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ac4bc9594 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1003 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.52 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tdv44 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ac4bc9594 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1003 identity=8624 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.52 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tdv44 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ac4bc9594 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1003 identity=8624 ipv4=10.0.0.52 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tdv44 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3ac4bc9594 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1003 identity=8624 ipv4=10.0.0.52 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tdv44 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ac4bc9594 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1003 identity=8624 ipv4=10.0.0.52 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tdv44 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2696 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02696 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02696 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02696 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02696:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2696 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 0b8d0afe-d3e1-4dd9-b88e-2227b8a8ce86 default }" containerID=d9ec8fa7164ebc982f11cba66cdb1a6257a0cb5110da01df911279e542531fe9 datapathConfiguration="&{false false false false false }" interface=lxc10380270beb1 k8sPodName=kube-system/coredns-67659f764b-l2fvb labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.21 2bdba121-e988-4065-ab50-db90d19bd35e default }" containerID=79bdaa8ea1be49e2e728d499606dc85b65067f819a4d01097bf84ef9a1b2fc2e datapathConfiguration="&{false false false false false }" interface=lxc13181c3c26f8 k8sPodName=kube-system/coredns-67659f764b-5dqpb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9ec8fa716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2597 ipv4=10.0.0.65 ipv6= k8sPodName=kube-system/coredns-67659f764b-l2fvb subsys=endpoint level=info msg="New endpoint" containerID=79bdaa8ea1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2681 ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/coredns-67659f764b-5dqpb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9ec8fa716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2597 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.65 ipv6= k8sPodName=kube-system/coredns-67659f764b-l2fvb subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d9ec8fa716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2597 identity=11597 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.65 ipv6= k8sPodName=kube-system/coredns-67659f764b-l2fvb oldIdentity="no identity" subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79bdaa8ea1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2681 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/coredns-67659f764b-5dqpb subsys=endpoint level=info msg="Identity of endpoint changed" containerID=79bdaa8ea1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2681 identity=11597 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/coredns-67659f764b-5dqpb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79bdaa8ea1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2681 identity=11597 ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/coredns-67659f764b-5dqpb subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9ec8fa716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2597 identity=11597 ipv4=10.0.0.65 ipv6= k8sPodName=kube-system/coredns-67659f764b-l2fvb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79bdaa8ea1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2681 identity=11597 ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/coredns-67659f764b-5dqpb subsys=endpoint level=info msg="Successful endpoint creation" containerID=79bdaa8ea1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2681 identity=11597 ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/coredns-67659f764b-5dqpb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d9ec8fa716 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2597 identity=11597 ipv4=10.0.0.65 ipv6= k8sPodName=kube-system/coredns-67659f764b-l2fvb subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9ec8fa716 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2597 identity=11597 ipv4=10.0.0.65 ipv6= k8sPodName=kube-system/coredns-67659f764b-l2fvb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.46 8de910f0-2c0d-4d83-9d9a-ff07106c1fd3 default }" containerID=18f4c8f9521b6622c3cc579e62ba9322357a1f0e78c7eb77d5f49c840723a6f1 datapathConfiguration="&{false false false false false }" interface=lxce5bd0dfb4ad0 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-bmxs5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18f4c8f952 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2972 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-bmxs5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18f4c8f952 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2972 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-bmxs5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18f4c8f952 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2972 identity=25119 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-bmxs5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18f4c8f952 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2972 identity=25119 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-bmxs5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=18f4c8f952 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2972 identity=25119 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-bmxs5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=18f4c8f952 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2972 identity=25119 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-bmxs5 subsys=daemon level=info msg="Delete endpoint request" containerID=8bd188f072 endpointID=117 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-2gjh6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=8bd188f072 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=117 identity=11597 ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2gjh6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 b21251a2-9097-4bd3-a1c2-d28dedee590b default }" containerID=34a1edfd93ead70cce4c1fe26f08ac63bb2522370da0fb2b9f9409599dd2e587 datapathConfiguration="&{false false false false false }" interface=lxcf123b0ab5a13 k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-z7zxn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34a1edfd93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 ipv4=10.0.0.32 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-z7zxn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34a1edfd93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.32 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-z7zxn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.90 2388bd41-f5f5-4543-ac5c-c7b8b657200e default }" containerID=e8fb2c6caee1f865dc6518fdb29fbd2772e46091bba85c318467638ecea7f456 datapathConfiguration="&{false false false false false }" interface=lxc5b77b3df0238 k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-fgrvn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8fb2c6cae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-fgrvn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8fb2c6cae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-fgrvn subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34a1edfd93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identity=58753 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.32 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-z7zxn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34a1edfd93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identity=58753 ipv4=10.0.0.32 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-z7zxn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=e8fb2c6cae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-fgrvn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8fb2c6cae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 identity=12405 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-fgrvn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8fb2c6cae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 identity=12405 ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-fgrvn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34a1edfd93 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1397 identity=58753 ipv4=10.0.0.32 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-z7zxn subsys=endpoint level=info msg="Successful endpoint creation" containerID=34a1edfd93 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1397 identity=58753 ipv4=10.0.0.32 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-z7zxn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.125 fae71e08-d981-4342-bbe0-7798a4c6d013 default }" containerID=26e2b7341c420fac7c3b85afa6e4d2fa28b2095c00670598f0a458111098aee7 datapathConfiguration="&{false false false false false }" interface=lxc876df709dfc7 k8sPodName=cert-manager/cert-manager-75969b45cf-4t4w9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26e2b7341c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-4t4w9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26e2b7341c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-4t4w9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26e2b7341c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 identity=27003 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-4t4w9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26e2b7341c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 identity=27003 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-4t4w9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8fb2c6cae datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2196 identity=12405 ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-fgrvn subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8fb2c6cae datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2196 identity=12405 ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-fgrvn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=26e2b7341c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3835 identity=27003 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-4t4w9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=26e2b7341c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3835 identity=27003 ipv4=10.0.0.125 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-4t4w9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.14 7387a67e-77ad-40c5-ab3f-fde7b84d5bae default }" containerID=db5e1bd0c1e22988e2172c27d042f0f9b1328ad4bced9209b20f786782f1672c datapathConfiguration="&{false false false false false }" interface=lxcdbe37457f491 k8sPodName=cert-manager/cert-manager-startupapicheck-77lnk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db5e1bd0c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 ipv4=10.0.0.14 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-77lnk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db5e1bd0c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=9becae17-cbd8-4f27-983f-67eebb5930e2,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=9becae17-cbd8-4f27-983f-67eebb5930e2,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.14 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-77lnk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=9becae17-cbd8-4f27-983f-67eebb5930e2;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=9becae17-cbd8-4f27-983f-67eebb5930e2;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db5e1bd0c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 identity=23949 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=9becae17-cbd8-4f27-983f-67eebb5930e2,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=9becae17-cbd8-4f27-983f-67eebb5930e2,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.14 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-77lnk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db5e1bd0c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 identity=23949 ipv4=10.0.0.14 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-77lnk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db5e1bd0c1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=214 identity=23949 ipv4=10.0.0.14 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-77lnk subsys=endpoint level=info msg="Successful endpoint creation" containerID=db5e1bd0c1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=214 identity=23949 ipv4=10.0.0.14 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-77lnk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=db5e1bd0c1 endpointID=214 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-77lnk subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=9becae17-cbd8-4f27-983f-67eebb5930e2 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=9becae17-cbd8-4f27-983f-67eebb5930e2 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=db5e1bd0c1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=214 identity=23949 ipv4=10.0.0.14 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-77lnk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 99302ca6-8d57-468e-9837-e517cbf4f9b9 default }" containerID=ef4e6f933b68a495a111509fbcc0cb72e4462fadbe2c291d384b94a5a8096e59 datapathConfiguration="&{false false false false false }" interface=lxc0e2e7163d846 k8sPodName=ingress-nginx/ingress-nginx-admission-create-wm7cn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef4e6f933b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2059 ipv4=10.0.0.4 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wm7cn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef4e6f933b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2059 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ca28069c-48f7-46f9-97cb-36e682d3bd34,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=ca28069c-48f7-46f9-97cb-36e682d3bd34,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.4 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wm7cn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=ca28069c-48f7-46f9-97cb-36e682d3bd34;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=ca28069c-48f7-46f9-97cb-36e682d3bd34;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef4e6f933b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2059 identity=30633 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ca28069c-48f7-46f9-97cb-36e682d3bd34,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=ca28069c-48f7-46f9-97cb-36e682d3bd34,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.4 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wm7cn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ef4e6f933b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2059 identity=30633 ipv4=10.0.0.4 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wm7cn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ef4e6f933b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2059 identity=30633 ipv4=10.0.0.4 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wm7cn subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef4e6f933b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2059 identity=30633 ipv4=10.0.0.4 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wm7cn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ef4e6f933b endpointID=2059 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-wm7cn subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=ca28069c-48f7-46f9-97cb-36e682d3bd34 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=ca28069c-48f7-46f9-97cb-36e682d3bd34 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=ef4e6f933b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2059 identity=30633 ipv4=10.0.0.4 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wm7cn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 ef806f02-d1c1-4214-b69f-244caf714d14 default }" containerID=853fbefe2b28bfd2fc8f712896614ba9a3b8347dc5b2e439402c6c699205c913 datapathConfiguration="&{false false false false false }" interface=lxc99e8dd4bb8e9 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nzjnj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=853fbefe2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 ipv4=10.0.0.120 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nzjnj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=853fbefe2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.120 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nzjnj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=853fbefe2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identity=4307 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.120 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nzjnj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=853fbefe2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identity=4307 ipv4=10.0.0.120 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nzjnj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=853fbefe2b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=333 identity=4307 ipv4=10.0.0.120 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nzjnj subsys=endpoint level=info msg="Successful endpoint creation" containerID=853fbefe2b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=333 identity=4307 ipv4=10.0.0.120 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nzjnj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.145 7569ce92-cd6d-49bf-b179-fdeb05011e5f default }" containerID=84e8092b84d45547ba0bc0bdfdf6e0b509f0c5c46a3ea97a7503bfa5831899cf datapathConfiguration="&{false false false false false }" interface=lxc00ab2a95d7c0 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dkrkw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84e8092b84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=823 ipv4=10.0.0.145 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dkrkw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84e8092b84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=823 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=830621b0-48fd-421a-9e1d-39291a8addbe,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=830621b0-48fd-421a-9e1d-39291a8addbe,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.145 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dkrkw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=830621b0-48fd-421a-9e1d-39291a8addbe;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=830621b0-48fd-421a-9e1d-39291a8addbe;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84e8092b84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=823 identity=49118 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=830621b0-48fd-421a-9e1d-39291a8addbe,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=830621b0-48fd-421a-9e1d-39291a8addbe,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.145 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dkrkw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84e8092b84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=823 identity=49118 ipv4=10.0.0.145 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dkrkw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=84e8092b84 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=823 identity=49118 ipv4=10.0.0.145 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dkrkw subsys=endpoint level=info msg="Successful endpoint creation" containerID=84e8092b84 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=823 identity=49118 ipv4=10.0.0.145 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dkrkw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=84e8092b84 endpointID=823 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-dkrkw subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=830621b0-48fd-421a-9e1d-39291a8addbe k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=830621b0-48fd-421a-9e1d-39291a8addbe k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=84e8092b84 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=823 identity=49118 ipv4=10.0.0.145 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dkrkw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 ea678fe9-db59-42d7-a6ef-5c48fd1b70e6 default }" containerID=bd36b95e62c9c46d58a21e50fcd9e0fe907ccb12c0c68823fd5a63ccc29665ee datapathConfiguration="&{false false false false false }" interface=lxc855107aeeefd k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-fn5tc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd36b95e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3730 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-fn5tc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd36b95e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3730 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-fn5tc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=bd36b95e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3730 identity=13087 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-fn5tc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd36b95e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3730 identity=13087 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-fn5tc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd36b95e62 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3730 identity=13087 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-fn5tc subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd36b95e62 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3730 identity=13087 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-fn5tc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.121 72ffdd49-e80b-4b6c-9a41-edf29ea4e028 default }" containerID=4a8d06abc89d8d634b7b293f3419b59536caac893197d6fd2add679b7a23d214 datapathConfiguration="&{false false false false false }" interface=lxc5d1788a41abb k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-jctpc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a8d06abc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3301 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-jctpc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a8d06abc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3301 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-jctpc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a8d06abc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3301 identity=62574 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-jctpc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a8d06abc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3301 identity=62574 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-jctpc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a8d06abc8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3301 identity=62574 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-jctpc subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a8d06abc8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3301 identity=62574 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-jctpc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.105 0dd4401d-d5ad-43d0-9504-960cabf32c2d default }" containerID=cd617e81868567da8376d68532065ec84be64eb2108cf621f8e3d1c7e9c015f3 datapathConfiguration="&{false false false false false }" interface=lxc3ba9c8497f78 k8sPodName=openstack/pxc-operator-59d66cbc78-6mnm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd617e8186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-6mnm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd617e8186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-6mnm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd617e8186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identity=22534 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-6mnm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd617e8186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identity=22534 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-6mnm8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cd617e8186 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2215 identity=22534 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-6mnm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd617e8186 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2215 identity=22534 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-6mnm8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.239 1566b712-84dd-41f4-bee3-268b9a23ccc3 default }" containerID=2e8cbd7523eab841cb1bf1af68d5fa8232e43fa7e76d83d6f04a7a503901288c datapathConfiguration="&{false false false false false }" interface=lxcfaf1f5d4b44c k8sPodName=local-path-storage/helper-pod-create-pvc-48216364-9395-4e54-b3b2-4e87f39752d5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e8cbd7523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48216364-9395-4e54-b3b2-4e87f39752d5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e8cbd7523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48216364-9395-4e54-b3b2-4e87f39752d5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2e8cbd7523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48216364-9395-4e54-b3b2-4e87f39752d5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e8cbd7523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 identity=4702 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48216364-9395-4e54-b3b2-4e87f39752d5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e8cbd7523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=911 identity=4702 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48216364-9395-4e54-b3b2-4e87f39752d5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2e8cbd7523 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=911 identity=4702 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48216364-9395-4e54-b3b2-4e87f39752d5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e8cbd7523 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=911 identity=4702 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48216364-9395-4e54-b3b2-4e87f39752d5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.228 2d90aa3e-9424-492f-81d7-54ff198c4bfa default }" containerID=51a91ee5cee9ca4eb8de2ba5e63a76609048eb6f644b1f927383dae947e474dc datapathConfiguration="&{false false false false false }" interface=lxce9dabb1194b4 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51a91ee5ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51a91ee5ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51a91ee5ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 identity=33476 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51a91ee5ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 identity=33476 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51a91ee5ce datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3204 identity=33476 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=51a91ee5ce datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3204 identity=33476 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2e8cbd7523 endpointID=911 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-48216364-9395-4e54-b3b2-4e87f39752d5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2e8cbd7523 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=911 identity=4702 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48216364-9395-4e54-b3b2-4e87f39752d5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 d731bd0b-8d68-4961-a9db-a6969592fd37 default }" containerID=42f41136dfaf4c19a7426aff9d874e302b7c2601515b3eb39abc69a22a5b618b datapathConfiguration="&{false false false false false }" interface=lxca79847aa9873 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42f41136df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3708 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42f41136df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3708 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=42f41136df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3708 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.118 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42f41136df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3708 identity=21943 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42f41136df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3708 identity=21943 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42f41136df datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3708 identity=21943 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=42f41136df datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3708 identity=21943 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.95 0dbd07f1-d946-441a-80bf-76b0fbcfebdd default }" containerID=42ff375cc760de2366fc096e4af20a4a2645f231aabf3cd57364f1bad5f5832d datapathConfiguration="&{false false false false false }" interface=lxc3926d019b630 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42ff375cc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 ipv4=10.0.0.95 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42ff375cc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.95 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-16.0.3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=42ff375cc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 identity=12158 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.95 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42ff375cc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 identity=12158 ipv4=10.0.0.95 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42ff375cc7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1106 identity=12158 ipv4=10.0.0.95 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=42ff375cc7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1106 identity=12158 ipv4=10.0.0.95 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.211 d0ce6ac8-216b-4d6e-b684-d536f5c27ce6 default }" containerID=02ae12bc6be9cf8509122dac31a5782f5c32cf353cfd4887f186cac91b7942d9 datapathConfiguration="&{false false false false false }" interface=lxc4b1fc5e16bad k8sPodName=monitoring/node-feature-discovery-worker-hlh6m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02ae12bc6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3868 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hlh6m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02ae12bc6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3868 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hlh6m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02ae12bc6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3868 identity=12536 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hlh6m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02ae12bc6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3868 identity=12536 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hlh6m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.172 c528dfae-6157-49fa-b951-522e349f1efa default }" containerID=8abe3eb2bd0c0cfcb60a5f24ca16bc1ff829d2c427929e01a74c634e7d0eed21 datapathConfiguration="&{false false false false false }" interface=lxcba84d8b5c05a k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-wlkwf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8abe3eb2bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=810 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-wlkwf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8abe3eb2bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=810 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-wlkwf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8abe3eb2bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=810 identity=27791 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-wlkwf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8abe3eb2bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=810 identity=27791 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-wlkwf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=02ae12bc6b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3868 identity=12536 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hlh6m subsys=endpoint level=info msg="Successful endpoint creation" containerID=02ae12bc6b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3868 identity=12536 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hlh6m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8abe3eb2bd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=810 identity=27791 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-wlkwf subsys=endpoint level=info msg="Successful endpoint creation" containerID=8abe3eb2bd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=810 identity=27791 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-wlkwf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.88 0143134f-f414-4024-8564-02c41c086f06 default }" containerID=fa4ca2a28288000fdbda0021e34fcb876c6a4d3854c7b81fcaec47328e2cdbe9 datapathConfiguration="&{false false false false false }" interface=lxc7700cf9b4045 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2xr7r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa4ca2a282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 ipv4=10.0.0.88 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2xr7r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa4ca2a282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.88 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2xr7r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa4ca2a282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identity=19871 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.88 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2xr7r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa4ca2a282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identity=19871 ipv4=10.0.0.88 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2xr7r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa4ca2a282 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2176 identity=19871 ipv4=10.0.0.88 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2xr7r subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa4ca2a282 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2176 identity=19871 ipv4=10.0.0.88 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2xr7r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2696 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SCE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02696 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02696 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02696 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02696:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2696 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.011379468935571577 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.103 221e1791-9cf4-45da-a9cd-364280081045 default }" containerID=f150e5b6723b0d68680a6325e0232a10fc8b1fc1a70cb6470756e8e0dbfd2382 datapathConfiguration="&{false false false false false }" interface=lxc9f8e80571366 k8sPodName=monitoring/kube-prometheus-stack-admission-create-ftmh2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f150e5b672 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ftmh2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f150e5b672 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=76459fb2-7cfa-471e-b2a8-fe8fc95032b5,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=76459fb2-7cfa-471e-b2a8-fe8fc95032b5,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ftmh2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=76459fb2-7cfa-471e-b2a8-fe8fc95032b5;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=76459fb2-7cfa-471e-b2a8-fe8fc95032b5;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f150e5b672 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identity=783 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=76459fb2-7cfa-471e-b2a8-fe8fc95032b5,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=76459fb2-7cfa-471e-b2a8-fe8fc95032b5,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ftmh2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f150e5b672 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identity=783 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ftmh2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f150e5b672 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=874 identity=783 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ftmh2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f150e5b672 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=874 identity=783 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ftmh2 subsys=daemon level=info msg="Delete endpoint request" containerID=f150e5b672 endpointID=874 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-ftmh2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=76459fb2-7cfa-471e-b2a8-fe8fc95032b5 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=76459fb2-7cfa-471e-b2a8-fe8fc95032b5 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f150e5b672 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=874 identity=783 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ftmh2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 fcf50115-75a0-452e-aa1b-ad7d480b0561 default }" containerID=763b5a2a6c5597d8338189c5c88bed1d9b3be9edf02b57d4039c6d5561015d9d datapathConfiguration="&{false false false false false }" interface=lxca919f184bc92 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bxmgh labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.201 2e5f8b71-90d6-488d-9147-3726f0445d53 default }" containerID=ff3829b402f7b9b8f660935ac1e0e8b9ff1840b3c180a6c58a24dbd3d1a2b3bb datapathConfiguration="&{false false false false false }" interface=lxcb8f613394f47 k8sPodName=monitoring/kube-prometheus-stack-grafana-75d67865fd-vsfph labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=763b5a2a6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bxmgh subsys=endpoint level=info msg="New endpoint" containerID=ff3829b402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=974 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-75d67865fd-vsfph subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=763b5a2a6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bxmgh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 e308ebb2-b5a6-4aaf-9d7f-94bd81267c71 default }" containerID=d080b6740ca8ce805a91e54456c534735187dc420b372ad382e9f0cf685d2bac datapathConfiguration="&{false false false false false }" interface=lxcce51b678dc40 k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-hkpxz labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=ff3829b402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=974 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-75d67865fd-vsfph subsys=endpoint level=info msg="New endpoint" containerID=d080b6740c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-hkpxz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d080b6740c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-hkpxz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ff3829b402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=974 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-75d67865fd-vsfph line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=763b5a2a6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bxmgh line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=d080b6740c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-hkpxz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=763b5a2a6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 identity=26172 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bxmgh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=763b5a2a6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 identity=26172 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bxmgh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff3829b402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=974 identity=60488 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-75d67865fd-vsfph oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff3829b402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=974 identity=60488 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-75d67865fd-vsfph subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:chart=kube-prometheus-stack-58.1.3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d080b6740c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identity=38813 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-hkpxz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d080b6740c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identity=38813 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-hkpxz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=763b5a2a6c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2422 identity=26172 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bxmgh subsys=endpoint level=info msg="Successful endpoint creation" containerID=763b5a2a6c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2422 identity=26172 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bxmgh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ff3829b402 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=974 identity=60488 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-75d67865fd-vsfph subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff3829b402 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=974 identity=60488 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-75d67865fd-vsfph subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d080b6740c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=180 identity=38813 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-hkpxz subsys=endpoint level=info msg="Successful endpoint creation" containerID=d080b6740c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=180 identity=38813 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-hkpxz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.152 cc6d44df-60f9-45b5-bcdc-629b7a004833 default }" containerID=cb9f4a8c71368c6045b8dce2308ed8f619053769a856d3b7a988c900bff06100 datapathConfiguration="&{false false false false false }" interface=lxc7305a9f8a55d k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tnz86 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb9f4a8c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2247 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tnz86 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb9f4a8c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2247 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=91ebc987-742a-4c76-b9e4-9b893cb7e019,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=91ebc987-742a-4c76-b9e4-9b893cb7e019,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tnz86 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=91ebc987-742a-4c76-b9e4-9b893cb7e019;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=91ebc987-742a-4c76-b9e4-9b893cb7e019;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb9f4a8c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2247 identity=20404 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=91ebc987-742a-4c76-b9e4-9b893cb7e019,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=91ebc987-742a-4c76-b9e4-9b893cb7e019,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tnz86 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb9f4a8c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2247 identity=20404 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tnz86 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb9f4a8c71 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2247 identity=20404 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tnz86 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb9f4a8c71 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2247 identity=20404 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tnz86 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cb9f4a8c71 endpointID=2247 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-tnz86 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=91ebc987-742a-4c76-b9e4-9b893cb7e019 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=91ebc987-742a-4c76-b9e4-9b893cb7e019 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=cb9f4a8c71 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2247 identity=20404 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tnz86 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 0a3c745c-bdd2-447b-bf25-defa2c47b8d3 default }" containerID=ca3b48602a148665dbefc5e6caf6a5a3f5c3583264509330b4de01875b8156cb datapathConfiguration="&{false false false false false }" interface=lxc4e887252e5e6 k8sPodName=local-path-storage/helper-pod-create-pvc-360fdb3e-e3dd-4f84-988d-a0f6296d3b0e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca3b48602a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1370 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-360fdb3e-e3dd-4f84-988d-a0f6296d3b0e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca3b48602a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1370 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-360fdb3e-e3dd-4f84-988d-a0f6296d3b0e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca3b48602a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1370 identity=4702 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-360fdb3e-e3dd-4f84-988d-a0f6296d3b0e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca3b48602a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1370 identity=4702 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-360fdb3e-e3dd-4f84-988d-a0f6296d3b0e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca3b48602a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1370 identity=4702 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-360fdb3e-e3dd-4f84-988d-a0f6296d3b0e subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca3b48602a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1370 identity=4702 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-360fdb3e-e3dd-4f84-988d-a0f6296d3b0e subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.91 d7cadbe6-340b-4205-b2b6-9c859446b11c default }" containerID=bf96c2322e1ffff783d8b62d67c0c6998f0cbeeb0d5c47b6a5970f1d0d626672 datapathConfiguration="&{false false false false false }" interface=lxccc722106a664 k8sPodName=local-path-storage/helper-pod-create-pvc-86169450-9c83-4960-88dd-b94019af038d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf96c2322e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=626 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86169450-9c83-4960-88dd-b94019af038d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf96c2322e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=626 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86169450-9c83-4960-88dd-b94019af038d subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bf96c2322e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=626 identity=4702 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86169450-9c83-4960-88dd-b94019af038d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf96c2322e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=626 identity=4702 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86169450-9c83-4960-88dd-b94019af038d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf96c2322e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=626 identity=4702 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86169450-9c83-4960-88dd-b94019af038d subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf96c2322e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=626 identity=4702 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86169450-9c83-4960-88dd-b94019af038d subsys=daemon level=info msg="Delete endpoint request" containerID=ca3b48602a endpointID=1370 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-360fdb3e-e3dd-4f84-988d-a0f6296d3b0e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ca3b48602a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1370 identity=4702 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-360fdb3e-e3dd-4f84-988d-a0f6296d3b0e subsys=endpoint level=info msg="Delete endpoint request" containerID=bf96c2322e endpointID=626 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-86169450-9c83-4960-88dd-b94019af038d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bf96c2322e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=626 identity=4702 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86169450-9c83-4960-88dd-b94019af038d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 410994f2-1b96-4667-b00a-607d672a2814 default }" containerID=3a5d42b5ceb3071402d02fcaef145297743ccfd8f74df1637289e87a5fc0bdac datapathConfiguration="&{false false false false false }" interface=lxc43223c36e1d3 k8sPodName=monitoring/loki-gateway-5cc45946cd-pcqs4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a5d42b5ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=943 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-pcqs4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a5d42b5ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=943 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-pcqs4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a5d42b5ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=943 identity=7349 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-pcqs4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a5d42b5ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=943 identity=7349 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-pcqs4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3a5d42b5ce datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=943 identity=7349 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-pcqs4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a5d42b5ce datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=943 identity=7349 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-pcqs4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.168 40476b6a-ebb6-4578-9d40-0a6b9e280972 default }" containerID=af7e7b251a907c8f5d2024e1787bc8b52768b5d56309f61a5b50311b8bab89e8 datapathConfiguration="&{false false false false false }" interface=lxcd316b6075978 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af7e7b251a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af7e7b251a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af7e7b251a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identity=3924 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af7e7b251a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identity=3924 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af7e7b251a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=724 identity=3924 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=af7e7b251a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=724 identity=3924 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.237 ba524b9c-7304-44a7-a8c1-02902c667852 default }" containerID=4ed5c696e593df82a780376654f44b786c32b891ca94c83cb1974a3906e8b3a5 datapathConfiguration="&{false false false false false }" interface=lxc28e292e291a9 k8sPodName=local-path-storage/helper-pod-create-pvc-2b09c25b-099f-4808-a5e6-ebda22c4ea45 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ed5c696e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b09c25b-099f-4808-a5e6-ebda22c4ea45 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ed5c696e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b09c25b-099f-4808-a5e6-ebda22c4ea45 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ed5c696e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 identity=4702 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b09c25b-099f-4808-a5e6-ebda22c4ea45 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ed5c696e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 identity=4702 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b09c25b-099f-4808-a5e6-ebda22c4ea45 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ed5c696e5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1031 identity=4702 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b09c25b-099f-4808-a5e6-ebda22c4ea45 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ed5c696e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1031 identity=4702 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b09c25b-099f-4808-a5e6-ebda22c4ea45 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.122 e3f384fd-f53d-486d-a9f9-05cc321b7e13 default }" containerID=0cf2dc84b65250d1ea8d4900bcdfc76c34493bf16313119e23ed0bc5f34293d2 datapathConfiguration="&{false false false false false }" interface=lxc73f34b786da6 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0cf2dc84b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0cf2dc84b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.74 c3493658-2fb5-45c3-b366-56d814f76597 default }" containerID=1ab9e07e7566bf4a6d5e6a6f02a467a85342992a8a95a85f56fa203171563e45 datapathConfiguration="&{false false false false false }" interface=lxc4d8b5e7207eb k8sPodName=monitoring/vector-jzsk7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ab9e07e75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3546 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/vector-jzsk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ab9e07e75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3546 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/vector-jzsk7 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0cf2dc84b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 identity=64884 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0cf2dc84b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 identity=64884 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=1ab9e07e75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3546 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/vector-jzsk7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ab9e07e75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3546 identity=24096 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/vector-jzsk7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ab9e07e75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3546 identity=24096 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/vector-jzsk7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0cf2dc84b6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1034 identity=64884 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0cf2dc84b6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1034 identity=64884 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1ab9e07e75 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3546 identity=24096 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/vector-jzsk7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ab9e07e75 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3546 identity=24096 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/vector-jzsk7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4ed5c696e5 endpointID=1031 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2b09c25b-099f-4808-a5e6-ebda22c4ea45 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4ed5c696e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1031 identity=4702 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b09c25b-099f-4808-a5e6-ebda22c4ea45 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 6d46eeb1-6d64-4373-8609-58944353b326 default }" containerID=756828abe192ac9e7ec1588e9dc1a9204fe2aaff582f7ecc0e21d5a28296452d datapathConfiguration="&{false false false false false }" interface=lxce512506351c0 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=756828abe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=756828abe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=756828abe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identity=8639 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=756828abe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identity=8639 ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=756828abe1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2616 identity=8639 ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=756828abe1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2616 identity=8639 ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.40 3d1e6b28-eeca-4e7b-953e-3bf5695f9a64 default }" containerID=f753a3d5a9588902dddb450da99f5850dc00c4361446f89f0059fcf2a0b40d3d datapathConfiguration="&{false false false false false }" interface=lxcbde0fad6f1ab k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-rzgw5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f753a3d5a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-rzgw5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f753a3d5a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-rzgw5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=prometheus-pushgateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=prometheus-pushgateway;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f753a3d5a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identity=12855 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-rzgw5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f753a3d5a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identity=12855 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-rzgw5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f753a3d5a9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=688 identity=12855 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-rzgw5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f753a3d5a9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=688 identity=12855 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-rzgw5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.158 a37a8ca1-9332-491b-9d2e-4be96e7d46a4 default }" containerID=7055533bb1bc1a6dd840239ef99783071829b05f3eeaefa800e49b02840217e5 datapathConfiguration="&{false false false false false }" interface=lxcfe5f9bf54ae3 k8sPodName=openstack/memcached-memcached-c47d949f5-rl5pq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7055533bb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-rl5pq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7055533bb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-rl5pq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7055533bb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identity=45642 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-rl5pq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7055533bb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identity=45642 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-rl5pq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7055533bb1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2295 identity=45642 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-rl5pq subsys=endpoint level=info msg="Successful endpoint creation" containerID=7055533bb1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2295 identity=45642 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-rl5pq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.87 691a74b1-9447-4059-8733-d9bf92671e2d default }" containerID=ecf13c237ebabb98cab80ebe99d4249ea4cd75e4aae82be47d4fe1cd6acef91d datapathConfiguration="&{false false false false false }" interface=lxce7365af24e4f k8sPodName=local-path-storage/helper-pod-create-pvc-f692c9d8-7910-48cb-8a93-41846eefe22a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ecf13c237e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f692c9d8-7910-48cb-8a93-41846eefe22a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ecf13c237e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f692c9d8-7910-48cb-8a93-41846eefe22a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ecf13c237e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identity=4702 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f692c9d8-7910-48cb-8a93-41846eefe22a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ecf13c237e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identity=4702 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f692c9d8-7910-48cb-8a93-41846eefe22a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ecf13c237e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=18 identity=4702 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f692c9d8-7910-48cb-8a93-41846eefe22a subsys=endpoint level=info msg="Successful endpoint creation" containerID=ecf13c237e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=18 identity=4702 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f692c9d8-7910-48cb-8a93-41846eefe22a subsys=daemon level=info msg="Delete endpoint request" containerID=ecf13c237e endpointID=18 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f692c9d8-7910-48cb-8a93-41846eefe22a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ecf13c237e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=18 identity=4702 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f692c9d8-7910-48cb-8a93-41846eefe22a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 deaf8bf4-8c04-4cbf-95a2-56ae53f5d4f7 default }" containerID=1b27dc4ba1d96759cb95b7f9329136bad57bf92e8902cc6822af917e82445bad datapathConfiguration="&{false false false false false }" interface=lxccc50ae4dc964 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b27dc4ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b27dc4ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b27dc4ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identity=25189 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b27dc4ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identity=25189 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b27dc4ba1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=690 identity=25189 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b27dc4ba1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=690 identity=25189 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.33 62b746f1-9d24-4b16-8add-452a07dd8e39 default }" containerID=750989c3feefd4f0e923ab76e22ae696d841f8e0c923ef6bc6585d01af3c074a datapathConfiguration="&{false false false false false }" interface=lxcc6365fbb167f k8sPodName=openstack/keystone-api-7bdd4b5fb5-t2wmx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=750989c3fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2464 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-api-7bdd4b5fb5-t2wmx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=750989c3fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2464 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-api-7bdd4b5fb5-t2wmx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=750989c3fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2464 identity=19976 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-api-7bdd4b5fb5-t2wmx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=750989c3fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2464 identity=19976 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-api-7bdd4b5fb5-t2wmx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 2761c8e5-9310-4d34-86ed-e0f06609e788 default }" containerID=c2656bcf04f2b985fdb57d71480cd70343f4f8ff2f76ba255f7d4e1cbfbf2603 datapathConfiguration="&{false false false false false }" interface=lxcef88fdc44765 k8sPodName=openstack/keystone-credential-setup-mpcv8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2656bcf04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1652 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-credential-setup-mpcv8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2656bcf04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1652 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2299b3ad-c835-4f02-bd9b-cc1a9b8e09ef,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=2299b3ad-c835-4f02-bd9b-cc1a9b8e09ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-credential-setup-mpcv8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2299b3ad-c835-4f02-bd9b-cc1a9b8e09ef;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=2299b3ad-c835-4f02-bd9b-cc1a9b8e09ef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2656bcf04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1652 identity=41671 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2299b3ad-c835-4f02-bd9b-cc1a9b8e09ef,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=2299b3ad-c835-4f02-bd9b-cc1a9b8e09ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-credential-setup-mpcv8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2656bcf04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1652 identity=41671 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-credential-setup-mpcv8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=750989c3fe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2464 identity=19976 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-api-7bdd4b5fb5-t2wmx subsys=endpoint level=info msg="Successful endpoint creation" containerID=750989c3fe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2464 identity=19976 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/keystone-api-7bdd4b5fb5-t2wmx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c2656bcf04 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1652 identity=41671 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-credential-setup-mpcv8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2656bcf04 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1652 identity=41671 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-credential-setup-mpcv8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c2656bcf04 endpointID=1652 k8sNamespace=openstack k8sPodName=keystone-credential-setup-mpcv8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2299b3ad-c835-4f02-bd9b-cc1a9b8e09ef k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=2299b3ad-c835-4f02-bd9b-cc1a9b8e09ef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c2656bcf04 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1652 identity=41671 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-credential-setup-mpcv8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 873f758d-8b80-4a2e-8b34-ce3550722294 default }" containerID=40ff2f5aaae072bf8168f301a48d41dd4d8e26c91c5ef1317503711d38643fa3 datapathConfiguration="&{false false false false false }" interface=lxc8827915dccad k8sPodName=openstack/keystone-db-init-krsh6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40ff2f5aaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-krsh6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40ff2f5aaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=301a2d2e-65f8-4a21-bdbf-9e43d1525240,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=301a2d2e-65f8-4a21-bdbf-9e43d1525240,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-krsh6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=301a2d2e-65f8-4a21-bdbf-9e43d1525240;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=301a2d2e-65f8-4a21-bdbf-9e43d1525240;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40ff2f5aaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=1963 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=301a2d2e-65f8-4a21-bdbf-9e43d1525240,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=301a2d2e-65f8-4a21-bdbf-9e43d1525240,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-krsh6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40ff2f5aaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=1963 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-krsh6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=40ff2f5aaa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=35 identity=1963 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-krsh6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=40ff2f5aaa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=35 identity=1963 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-krsh6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=40ff2f5aaa endpointID=35 k8sNamespace=openstack k8sPodName=keystone-db-init-krsh6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=301a2d2e-65f8-4a21-bdbf-9e43d1525240 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=301a2d2e-65f8-4a21-bdbf-9e43d1525240 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=40ff2f5aaa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=35 identity=1963 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-krsh6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 b8a0b951-2ccc-42c0-aa7e-d019395cf5b5 default }" containerID=9096e3ec8a990067a114d18cbebb32cfdf11185b1374a622971a4f94732b7fb5 datapathConfiguration="&{false false false false false }" interface=lxc525473f7d610 k8sPodName=openstack/keystone-fernet-setup-bkjrs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9096e3ec8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-fernet-setup-bkjrs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9096e3ec8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7f059e21-4534-4b2d-afe1-1b1eefc9a366,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=7f059e21-4534-4b2d-afe1-1b1eefc9a366,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-fernet-setup-bkjrs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7f059e21-4534-4b2d-afe1-1b1eefc9a366;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=7f059e21-4534-4b2d-afe1-1b1eefc9a366;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9096e3ec8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=14069 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7f059e21-4534-4b2d-afe1-1b1eefc9a366,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=7f059e21-4534-4b2d-afe1-1b1eefc9a366,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-fernet-setup-bkjrs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9096e3ec8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=14069 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-fernet-setup-bkjrs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9096e3ec8a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=297 identity=14069 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-fernet-setup-bkjrs subsys=endpoint level=info msg="Successful endpoint creation" containerID=9096e3ec8a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=297 identity=14069 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-fernet-setup-bkjrs subsys=daemon level=info msg="Delete endpoint request" containerID=9096e3ec8a endpointID=297 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-bkjrs subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7f059e21-4534-4b2d-afe1-1b1eefc9a366 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=7f059e21-4534-4b2d-afe1-1b1eefc9a366 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9096e3ec8a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=297 identity=14069 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-fernet-setup-bkjrs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 bf7e100b-0bb5-4a68-aa62-f1e3d517351f default }" containerID=e45c198b139870bed69adf4772ac29fb5d52998405809e9598a5e3d2bfcec5be datapathConfiguration="&{false false false false false }" interface=lxc694d8b6412b1 k8sPodName=openstack/keystone-db-sync-clmm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e45c198b13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-db-sync-clmm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e45c198b13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ae973622-1015-479d-b641-6f58b7420818,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=ae973622-1015-479d-b641-6f58b7420818,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-db-sync-clmm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ae973622-1015-479d-b641-6f58b7420818;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=ae973622-1015-479d-b641-6f58b7420818;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e45c198b13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 identity=36237 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ae973622-1015-479d-b641-6f58b7420818,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=ae973622-1015-479d-b641-6f58b7420818,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-db-sync-clmm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e45c198b13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 identity=36237 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-db-sync-clmm8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e45c198b13 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1212 identity=36237 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-db-sync-clmm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e45c198b13 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1212 identity=36237 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-db-sync-clmm8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e45c198b13 endpointID=1212 k8sNamespace=openstack k8sPodName=keystone-db-sync-clmm8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ae973622-1015-479d-b641-6f58b7420818 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=ae973622-1015-479d-b641-6f58b7420818 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e45c198b13 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1212 identity=36237 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-db-sync-clmm8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 c5a9d170-896b-482d-82d5-70faf00dfd0c default }" containerID=f7a4846848c70c9875efbd5933faa5b3bebc9593abec4927d2b24b57d371a516 datapathConfiguration="&{false false false false false }" interface=lxcf0b0b476900d k8sPodName=openstack/keystone-rabbit-init-6bmbm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7a4846848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-rabbit-init-6bmbm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7a4846848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a4df3b28-3f40-4935-adef-b68fdb65d5a5,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a4df3b28-3f40-4935-adef-b68fdb65d5a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-rabbit-init-6bmbm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a4df3b28-3f40-4935-adef-b68fdb65d5a5;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a4df3b28-3f40-4935-adef-b68fdb65d5a5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f7a4846848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-rabbit-init-6bmbm line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f7a4846848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identity=5060 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a4df3b28-3f40-4935-adef-b68fdb65d5a5,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a4df3b28-3f40-4935-adef-b68fdb65d5a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-rabbit-init-6bmbm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7a4846848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identity=5060 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-rabbit-init-6bmbm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7a4846848 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1225 identity=5060 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-rabbit-init-6bmbm subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7a4846848 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1225 identity=5060 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-rabbit-init-6bmbm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f7a4846848 endpointID=1225 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-6bmbm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a4df3b28-3f40-4935-adef-b68fdb65d5a5 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a4df3b28-3f40-4935-adef-b68fdb65d5a5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f7a4846848 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1225 identity=5060 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-rabbit-init-6bmbm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 f2c37162-7e5d-4025-b439-c91222e85ee4 default }" containerID=ab79fef100614be671d0135b6182204fcd23eba3e4415141424fa7a9dc459812 datapathConfiguration="&{false false false false false }" interface=lxc31ba09e684c9 k8sPodName=openstack/keystone-domain-manage-fsllf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab79fef100 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-domain-manage-fsllf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab79fef100 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6dc16917-bc85-4801-9da5-d62a0766e9dc,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=6dc16917-bc85-4801-9da5-d62a0766e9dc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-domain-manage-fsllf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6dc16917-bc85-4801-9da5-d62a0766e9dc;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=6dc16917-bc85-4801-9da5-d62a0766e9dc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab79fef100 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 identity=6699 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6dc16917-bc85-4801-9da5-d62a0766e9dc,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=6dc16917-bc85-4801-9da5-d62a0766e9dc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-domain-manage-fsllf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab79fef100 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 identity=6699 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-domain-manage-fsllf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab79fef100 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=96 identity=6699 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-domain-manage-fsllf subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab79fef100 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=96 identity=6699 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-domain-manage-fsllf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ab79fef100 endpointID=96 k8sNamespace=openstack k8sPodName=keystone-domain-manage-fsllf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6dc16917-bc85-4801-9da5-d62a0766e9dc k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=6dc16917-bc85-4801-9da5-d62a0766e9dc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ab79fef100 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=96 identity=6699 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-domain-manage-fsllf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 95c6ba4b-c498-43f5-8b2f-871f47feb99e default }" containerID=3bc62c4ed82619a9f981396b4dad1e63ec9826adaa77b63533aa6ce9e61b45d6 datapathConfiguration="&{false false false false false }" interface=lxcec5098d74df1 k8sPodName=openstack/keystone-bootstrap-vgbr4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bc62c4ed8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-bootstrap-vgbr4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bc62c4ed8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b3a21465-8b37-4af7-9517-e2b05c498544,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b3a21465-8b37-4af7-9517-e2b05c498544,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-bootstrap-vgbr4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b3a21465-8b37-4af7-9517-e2b05c498544;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=b3a21465-8b37-4af7-9517-e2b05c498544;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bc62c4ed8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 identity=38154 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b3a21465-8b37-4af7-9517-e2b05c498544,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b3a21465-8b37-4af7-9517-e2b05c498544,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-bootstrap-vgbr4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bc62c4ed8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 identity=38154 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-bootstrap-vgbr4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3bc62c4ed8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1874 identity=38154 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-bootstrap-vgbr4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bc62c4ed8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1874 identity=38154 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-bootstrap-vgbr4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3bc62c4ed8 endpointID=1874 k8sNamespace=openstack k8sPodName=keystone-bootstrap-vgbr4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b3a21465-8b37-4af7-9517-e2b05c498544 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=b3a21465-8b37-4af7-9517-e2b05c498544 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3bc62c4ed8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1874 identity=38154 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-bootstrap-vgbr4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 a225e8d1-07cf-41aa-bfa5-c9d21c46be4d default }" containerID=c8c10023c1f9eed5ec77a129b595e2016bef245311762c6c7df8e9a2205d1681 datapathConfiguration="&{false false false false false }" interface=lxc0552a081e5e8 k8sPodName=local-path-storage/helper-pod-create-pvc-eb2d9dea-3225-411d-ad52-3d1321e23feb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8c10023c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1896 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb2d9dea-3225-411d-ad52-3d1321e23feb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8c10023c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1896 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb2d9dea-3225-411d-ad52-3d1321e23feb subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8c10023c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1896 identity=4702 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb2d9dea-3225-411d-ad52-3d1321e23feb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8c10023c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1896 identity=4702 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb2d9dea-3225-411d-ad52-3d1321e23feb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8c10023c1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1896 identity=4702 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb2d9dea-3225-411d-ad52-3d1321e23feb subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8c10023c1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1896 identity=4702 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb2d9dea-3225-411d-ad52-3d1321e23feb subsys=daemon level=info msg="Delete endpoint request" containerID=c8c10023c1 endpointID=1896 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-eb2d9dea-3225-411d-ad52-3d1321e23feb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c8c10023c1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1896 identity=4702 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb2d9dea-3225-411d-ad52-3d1321e23feb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 6caa188a-4a03-4d59-bb21-13e717107fc1 default }" containerID=9955dc4b26fe54de1fe87d59cecdef27871b4e981d5c8e39672b4b1dee7b4d7e datapathConfiguration="&{false false false false false }" interface=lxc2ac15f326894 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9955dc4b26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3804 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9955dc4b26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3804 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9955dc4b26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3804 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9955dc4b26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3804 identity=36927 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9955dc4b26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3804 identity=36927 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9955dc4b26 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3804 identity=36927 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9955dc4b26 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3804 identity=36927 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.191 253aa088-a9e6-47c3-971a-13e2743c353e default }" containerID=0cac66fe7f32bb936fe73b4b54da5557f953a11164468c79e05d01dba57e3e04 datapathConfiguration="&{false false false false false }" interface=lxc04043ce6f2d0 k8sPodName=openstack/barbican-api-78cf4dc855-h5dk9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0cac66fe7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3024 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/barbican-api-78cf4dc855-h5dk9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0cac66fe7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3024 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/barbican-api-78cf4dc855-h5dk9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0cac66fe7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3024 identity=42115 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/barbican-api-78cf4dc855-h5dk9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0cac66fe7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3024 identity=42115 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/barbican-api-78cf4dc855-h5dk9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.248 f039c298-43df-4849-ae3f-29ddb7edf73e default }" containerID=d2115e1cf8322eaca20d4fc5fc71b9fc3a01e16d7ca74dd2ba0d1d61f8860ecd datapathConfiguration="&{false false false false false }" interface=lxc621c78d23e70 k8sPodName=openstack/barbican-db-init-k7mnq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2115e1cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1459 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/barbican-db-init-k7mnq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2115e1cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1459 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=74e0d738-7103-466f-8d2e-18605c5957b8,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=74e0d738-7103-466f-8d2e-18605c5957b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/barbican-db-init-k7mnq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=74e0d738-7103-466f-8d2e-18605c5957b8;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=74e0d738-7103-466f-8d2e-18605c5957b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2115e1cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1459 identity=24932 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=74e0d738-7103-466f-8d2e-18605c5957b8,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=74e0d738-7103-466f-8d2e-18605c5957b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/barbican-db-init-k7mnq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2115e1cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1459 identity=24932 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/barbican-db-init-k7mnq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0cac66fe7f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3024 identity=42115 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/barbican-api-78cf4dc855-h5dk9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0cac66fe7f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3024 identity=42115 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/barbican-api-78cf4dc855-h5dk9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d2115e1cf8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1459 identity=24932 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/barbican-db-init-k7mnq subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2115e1cf8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1459 identity=24932 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/barbican-db-init-k7mnq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d2115e1cf8 endpointID=1459 k8sNamespace=openstack k8sPodName=barbican-db-init-k7mnq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=74e0d738-7103-466f-8d2e-18605c5957b8 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=74e0d738-7103-466f-8d2e-18605c5957b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d2115e1cf8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1459 identity=24932 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/barbican-db-init-k7mnq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 43ae2bbe-a607-4176-9504-54a4ae4bfe3a default }" containerID=47e3cd912c76e33749077cebe5b4629dadfa361bb6a1f5212989dcfddaaa9e19 datapathConfiguration="&{false false false false false }" interface=lxcda28ae6c98d8 k8sPodName=openstack/barbican-db-sync-mzkbj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47e3cd912c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-db-sync-mzkbj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47e3cd912c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8c74a8a9-ac60-4248-85bd-b88002852152,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=8c74a8a9-ac60-4248-85bd-b88002852152,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-db-sync-mzkbj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8c74a8a9-ac60-4248-85bd-b88002852152;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=8c74a8a9-ac60-4248-85bd-b88002852152;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47e3cd912c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identity=4790 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8c74a8a9-ac60-4248-85bd-b88002852152,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=8c74a8a9-ac60-4248-85bd-b88002852152,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-db-sync-mzkbj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47e3cd912c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identity=4790 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-db-sync-mzkbj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=47e3cd912c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=320 identity=4790 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-db-sync-mzkbj subsys=endpoint level=info msg="Successful endpoint creation" containerID=47e3cd912c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=320 identity=4790 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-db-sync-mzkbj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=47e3cd912c endpointID=320 k8sNamespace=openstack k8sPodName=barbican-db-sync-mzkbj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8c74a8a9-ac60-4248-85bd-b88002852152 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=8c74a8a9-ac60-4248-85bd-b88002852152 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=47e3cd912c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=320 identity=4790 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-db-sync-mzkbj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 a337e22f-7dd8-483e-9432-44581d25783f default }" containerID=5f30d9a35166c828c76fa4ff8f1463268c3224c1e6fcfa7232d5d489421604c9 datapathConfiguration="&{false false false false false }" interface=lxc6fee3a491df1 k8sPodName=openstack/barbican-rabbit-init-c9lxz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f30d9a351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1599 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-rabbit-init-c9lxz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f30d9a351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1599 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=68483e4c-c6d0-4894-a3d0-bb28d6abdb7a,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=68483e4c-c6d0-4894-a3d0-bb28d6abdb7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-rabbit-init-c9lxz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5f30d9a351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1599 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-rabbit-init-c9lxz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=68483e4c-c6d0-4894-a3d0-bb28d6abdb7a;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=68483e4c-c6d0-4894-a3d0-bb28d6abdb7a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f30d9a351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1599 identity=56070 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=68483e4c-c6d0-4894-a3d0-bb28d6abdb7a,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=68483e4c-c6d0-4894-a3d0-bb28d6abdb7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-rabbit-init-c9lxz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f30d9a351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1599 identity=56070 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-rabbit-init-c9lxz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5f30d9a351 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1599 identity=56070 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-rabbit-init-c9lxz subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f30d9a351 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1599 identity=56070 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-rabbit-init-c9lxz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5f30d9a351 endpointID=1599 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-c9lxz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=68483e4c-c6d0-4894-a3d0-bb28d6abdb7a k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=68483e4c-c6d0-4894-a3d0-bb28d6abdb7a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5f30d9a351 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1599 identity=56070 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/barbican-rabbit-init-c9lxz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 d438540b-d865-4005-a4c5-28bb27f2c609 default }" containerID=75484ce002ccb1ff0db5e633837f7723f66924344362cae6fdfbad633941c4b9 datapathConfiguration="&{false false false false false }" interface=lxc5c251a021b3d k8sPodName=openstack/barbican-ks-service-v289p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75484ce002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-service-v289p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75484ce002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=05ca7cee-a7d8-45e7-9f88-1f9d1907a95c,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=05ca7cee-a7d8-45e7-9f88-1f9d1907a95c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-service-v289p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=05ca7cee-a7d8-45e7-9f88-1f9d1907a95c;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=05ca7cee-a7d8-45e7-9f88-1f9d1907a95c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75484ce002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=50001 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=05ca7cee-a7d8-45e7-9f88-1f9d1907a95c,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=05ca7cee-a7d8-45e7-9f88-1f9d1907a95c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-service-v289p oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=75484ce002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=50001 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-service-v289p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=75484ce002 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1535 identity=50001 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-service-v289p subsys=endpoint level=info msg="Successful endpoint creation" containerID=75484ce002 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1535 identity=50001 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-service-v289p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=75484ce002 endpointID=1535 k8sNamespace=openstack k8sPodName=barbican-ks-service-v289p subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=05ca7cee-a7d8-45e7-9f88-1f9d1907a95c k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=05ca7cee-a7d8-45e7-9f88-1f9d1907a95c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=75484ce002 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1535 identity=50001 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-service-v289p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 d0aa91f1-e43f-46e2-8359-ed5a681ad804 default }" containerID=5bb9b04dde98e7d70252afe7f2d5ce7795c7d60a53561850b289f19c8821fc0c datapathConfiguration="&{false false false false false }" interface=lxc0ac364c996e8 k8sPodName=openstack/barbican-ks-endpoints-9td4b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5bb9b04dde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9td4b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5bb9b04dde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=77132fb1-35ca-487f-a0a7-cabcfd289efb,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=77132fb1-35ca-487f-a0a7-cabcfd289efb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9td4b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=77132fb1-35ca-487f-a0a7-cabcfd289efb;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=77132fb1-35ca-487f-a0a7-cabcfd289efb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5bb9b04dde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identity=45274 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=77132fb1-35ca-487f-a0a7-cabcfd289efb,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=77132fb1-35ca-487f-a0a7-cabcfd289efb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9td4b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5bb9b04dde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identity=45274 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9td4b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5bb9b04dde datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2428 identity=45274 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9td4b subsys=endpoint level=info msg="Successful endpoint creation" containerID=5bb9b04dde datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2428 identity=45274 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9td4b subsys=daemon level=info msg="Delete endpoint request" containerID=5bb9b04dde endpointID=2428 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-9td4b subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=77132fb1-35ca-487f-a0a7-cabcfd289efb k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=77132fb1-35ca-487f-a0a7-cabcfd289efb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5bb9b04dde datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2428 identity=45274 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/barbican-ks-endpoints-9td4b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 6b7d7fce-7c33-4d07-901e-5009838ec866 default }" containerID=63e67d3f2fc65704060bc7565ae7ec40964c77a166dec2e136297a64bae6a24e datapathConfiguration="&{false false false false false }" interface=lxc3b1b4b15b496 k8sPodName=openstack/barbican-ks-user-xpsn4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63e67d3f2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-user-xpsn4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63e67d3f2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e608ef81-57fa-45aa-9115-344ec5c56b0b,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=e608ef81-57fa-45aa-9115-344ec5c56b0b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-user-xpsn4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e608ef81-57fa-45aa-9115-344ec5c56b0b;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=e608ef81-57fa-45aa-9115-344ec5c56b0b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63e67d3f2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identity=16969 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e608ef81-57fa-45aa-9115-344ec5c56b0b,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=e608ef81-57fa-45aa-9115-344ec5c56b0b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-user-xpsn4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63e67d3f2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identity=16969 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-user-xpsn4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63e67d3f2f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=364 identity=16969 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-user-xpsn4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=63e67d3f2f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=364 identity=16969 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-user-xpsn4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=63e67d3f2f endpointID=364 k8sNamespace=openstack k8sPodName=barbican-ks-user-xpsn4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e608ef81-57fa-45aa-9115-344ec5c56b0b k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=e608ef81-57fa-45aa-9115-344ec5c56b0b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=63e67d3f2f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=364 identity=16969 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-user-xpsn4 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.9 e2f6b0cd-3be1-431c-af0d-6278618c17c0 default }" containerID=5e9506ed4b75eee1da3a6e074af2961c61332367d0d0987cd2bef2974b492851 datapathConfiguration="&{false false false false false }" interface=lxc4d804e3e357b k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-dxrrl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e9506ed4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 ipv4=10.0.0.9 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-dxrrl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e9506ed4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.9 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-dxrrl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5e9506ed4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.9 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-dxrrl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.10.10;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e9506ed4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 identity=57278 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.9 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-dxrrl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e9506ed4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 identity=57278 ipv4=10.0.0.9 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-dxrrl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e9506ed4b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3941 identity=57278 ipv4=10.0.0.9 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-dxrrl subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e9506ed4b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3941 identity=57278 ipv4=10.0.0.9 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-dxrrl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03747277719912887 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.73 d5a81628-8a93-46df-bbe5-df51484e8dd5 default }" containerID=bba38b59a616d7cd2b78911f52bdbe490b5a9cfbb4b8cf0c9aedddbe65c2661e datapathConfiguration="&{false false false false false }" interface=lxc0d2ae2b234f1 k8sPodName=openstack/rook-ceph-detect-version-ljjgq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bba38b59a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3434 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ljjgq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bba38b59a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3434 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=4d6a181b-5b56-464f-a9c7-bca1d43b5948,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=4d6a181b-5b56-464f-a9c7-bca1d43b5948,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ljjgq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=4d6a181b-5b56-464f-a9c7-bca1d43b5948;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=4d6a181b-5b56-464f-a9c7-bca1d43b5948;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=bba38b59a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3434 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ljjgq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bba38b59a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3434 identity=29093 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=4d6a181b-5b56-464f-a9c7-bca1d43b5948,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=4d6a181b-5b56-464f-a9c7-bca1d43b5948,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ljjgq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bba38b59a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3434 identity=29093 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ljjgq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bba38b59a6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3434 identity=29093 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ljjgq subsys=endpoint level=info msg="Successful endpoint creation" containerID=bba38b59a6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3434 identity=29093 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ljjgq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bba38b59a6 endpointID=3434 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-ljjgq subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=4d6a181b-5b56-464f-a9c7-bca1d43b5948 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=4d6a181b-5b56-464f-a9c7-bca1d43b5948 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=bba38b59a6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3434 identity=29093 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ljjgq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 51ae2a49-3463-4297-b45f-cf090b8d9697 default }" containerID=061aa5d085df0b9e71c37df9675fcc08a9a863c2b99800b569adc7227da2b994 datapathConfiguration="&{false false false false false }" interface=lxc656fdc3ac97b k8sPodName=local-path-storage/helper-pod-create-pvc-98554886-3a87-48cf-b950-405c56874ca2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=061aa5d085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3175 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98554886-3a87-48cf-b950-405c56874ca2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=061aa5d085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3175 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98554886-3a87-48cf-b950-405c56874ca2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=061aa5d085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3175 identity=4702 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98554886-3a87-48cf-b950-405c56874ca2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=061aa5d085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3175 identity=4702 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98554886-3a87-48cf-b950-405c56874ca2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=061aa5d085 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3175 identity=4702 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98554886-3a87-48cf-b950-405c56874ca2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=061aa5d085 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3175 identity=4702 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98554886-3a87-48cf-b950-405c56874ca2 subsys=daemon level=info msg="Delete endpoint request" containerID=061aa5d085 endpointID=3175 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-98554886-3a87-48cf-b950-405c56874ca2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=061aa5d085 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3175 identity=4702 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98554886-3a87-48cf-b950-405c56874ca2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 bf485be8-e756-4c0b-85f6-ecee2175192d default }" containerID=d714d82e15e55fa6a51d6de70bc876588374fd35c385ab92cb8d7f388cd3f450 datapathConfiguration="&{false false false false false }" interface=lxc484568be0d51 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d714d82e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d714d82e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d714d82e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d714d82e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 identity=53135 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d714d82e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 identity=53135 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d714d82e15 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1256 identity=53135 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d714d82e15 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1256 identity=53135 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.143 a8a961ac-a4cb-4fa2-bac9-b8343c3386da default }" containerID=7a210663475ea8957793b2dc7dc7fedab1a801a177bf1b246305b228a5d54c6d datapathConfiguration="&{false false false false false }" interface=lxc72be34db113b k8sPodName=openstack/ceph-object-controller-detect-version-n4b6p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a21066347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n4b6p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a21066347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=8c44bbf2-fc6c-4d95-a359-073c1c7238c0,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=8c44bbf2-fc6c-4d95-a359-073c1c7238c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n4b6p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=8c44bbf2-fc6c-4d95-a359-073c1c7238c0;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=8c44bbf2-fc6c-4d95-a359-073c1c7238c0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a21066347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identity=11539 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=8c44bbf2-fc6c-4d95-a359-073c1c7238c0,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=8c44bbf2-fc6c-4d95-a359-073c1c7238c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n4b6p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a21066347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identity=11539 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n4b6p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a21066347 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1604 identity=11539 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n4b6p subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a21066347 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1604 identity=11539 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n4b6p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7a21066347 endpointID=1604 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-n4b6p subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=8c44bbf2-fc6c-4d95-a359-073c1c7238c0 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=8c44bbf2-fc6c-4d95-a359-073c1c7238c0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=7a21066347 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1604 identity=11539 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n4b6p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 2f4ba5d8-a660-4696-bcab-da88230845f1 default }" containerID=4795ff180e013674f8e33b072166f4a0779962bc9a42a4a286fbe73785726634 datapathConfiguration="&{false false false false false }" interface=lxcb07bd3265384 k8sPodName=openstack/glance-db-init-8s4hg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4795ff180e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-db-init-8s4hg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4795ff180e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7d5637e3-1089-4db9-b0d2-878079f69aa3,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=7d5637e3-1089-4db9-b0d2-878079f69aa3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-db-init-8s4hg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7d5637e3-1089-4db9-b0d2-878079f69aa3;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=7d5637e3-1089-4db9-b0d2-878079f69aa3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4795ff180e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 identity=13010 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7d5637e3-1089-4db9-b0d2-878079f69aa3,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=7d5637e3-1089-4db9-b0d2-878079f69aa3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-db-init-8s4hg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4795ff180e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 identity=13010 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-db-init-8s4hg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4795ff180e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=664 identity=13010 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-db-init-8s4hg subsys=endpoint level=info msg="Successful endpoint creation" containerID=4795ff180e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=664 identity=13010 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-db-init-8s4hg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4795ff180e endpointID=664 k8sNamespace=openstack k8sPodName=glance-db-init-8s4hg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7d5637e3-1089-4db9-b0d2-878079f69aa3 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=7d5637e3-1089-4db9-b0d2-878079f69aa3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4795ff180e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=664 identity=13010 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-db-init-8s4hg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 103f0c5d-6a79-430f-88b5-59c0892c2e52 default }" containerID=51e027a30bd2ff869825a5ba18bce1de2951e77d63a01d3cd6cf793c6187c821 datapathConfiguration="&{false false false false false }" interface=lxcfada33cf4f9a k8sPodName=openstack/glance-db-sync-8bkfl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51e027a30b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-sync-8bkfl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51e027a30b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2585b757-b4db-476d-8e8f-0ef0f27bf77a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=2585b757-b4db-476d-8e8f-0ef0f27bf77a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-sync-8bkfl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=51e027a30b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-sync-8bkfl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2585b757-b4db-476d-8e8f-0ef0f27bf77a;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=2585b757-b4db-476d-8e8f-0ef0f27bf77a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51e027a30b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=29572 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2585b757-b4db-476d-8e8f-0ef0f27bf77a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=2585b757-b4db-476d-8e8f-0ef0f27bf77a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-sync-8bkfl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51e027a30b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=29572 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-sync-8bkfl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51e027a30b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=660 identity=29572 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-sync-8bkfl subsys=endpoint level=info msg="Successful endpoint creation" containerID=51e027a30b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=660 identity=29572 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-sync-8bkfl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=51e027a30b endpointID=660 k8sNamespace=openstack k8sPodName=glance-db-sync-8bkfl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2585b757-b4db-476d-8e8f-0ef0f27bf77a k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=2585b757-b4db-476d-8e8f-0ef0f27bf77a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=51e027a30b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=660 identity=29572 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-sync-8bkfl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 9deabc30-e870-474f-8936-af1907d103bd default }" containerID=699ecb676e0b6b1e536321356cd05293edd083cdc97adc0bfaf880abe64fcbce datapathConfiguration="&{false false false false false }" interface=lxc0c72db3dcc82 k8sPodName=openstack/glance-rabbit-init-fxbgn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=699ecb676e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3841 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-fxbgn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=699ecb676e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3841 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a4cc6182-ff5f-4a2c-908f-1b1a0b97be31,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a4cc6182-ff5f-4a2c-908f-1b1a0b97be31,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-fxbgn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a4cc6182-ff5f-4a2c-908f-1b1a0b97be31;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a4cc6182-ff5f-4a2c-908f-1b1a0b97be31;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=699ecb676e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3841 identity=14142 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a4cc6182-ff5f-4a2c-908f-1b1a0b97be31,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a4cc6182-ff5f-4a2c-908f-1b1a0b97be31,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-fxbgn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=699ecb676e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3841 identity=14142 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-fxbgn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=699ecb676e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3841 identity=14142 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-fxbgn subsys=endpoint level=info msg="Successful endpoint creation" containerID=699ecb676e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3841 identity=14142 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-fxbgn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=699ecb676e endpointID=3841 k8sNamespace=openstack k8sPodName=glance-rabbit-init-fxbgn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a4cc6182-ff5f-4a2c-908f-1b1a0b97be31 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a4cc6182-ff5f-4a2c-908f-1b1a0b97be31 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=699ecb676e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3841 identity=14142 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-fxbgn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 42139bef-c2d5-4454-bc4b-7848f9a8a053 default }" containerID=179a2368d5e17f9bdac41f3e792520459e2614e15b8793f8616ff356b4a0a009 datapathConfiguration="&{false false false false false }" interface=lxce31fd2db4e48 k8sPodName=openstack/glance-ks-service-hntlh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=179a2368d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2319 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-service-hntlh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=179a2368d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2319 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f776b7b9-946a-4c70-b789-6987fac8a6f2,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=f776b7b9-946a-4c70-b789-6987fac8a6f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-service-hntlh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f776b7b9-946a-4c70-b789-6987fac8a6f2;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=f776b7b9-946a-4c70-b789-6987fac8a6f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=179a2368d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2319 identity=33426 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f776b7b9-946a-4c70-b789-6987fac8a6f2,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=f776b7b9-946a-4c70-b789-6987fac8a6f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-service-hntlh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=179a2368d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2319 identity=33426 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-service-hntlh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=179a2368d5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2319 identity=33426 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-service-hntlh subsys=endpoint level=info msg="Successful endpoint creation" containerID=179a2368d5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2319 identity=33426 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-service-hntlh subsys=daemon level=info msg="Delete endpoint request" containerID=179a2368d5 endpointID=2319 k8sNamespace=openstack k8sPodName=glance-ks-service-hntlh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f776b7b9-946a-4c70-b789-6987fac8a6f2 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=f776b7b9-946a-4c70-b789-6987fac8a6f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=179a2368d5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2319 identity=33426 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-service-hntlh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 6534c5f6-cd27-4004-91a6-533bc1f63499 default }" containerID=b8827d41efb4c93230acba56f609529eede08cb3a304732daa824681245b28db datapathConfiguration="&{false false false false false }" interface=lxc4024c549c877 k8sPodName=openstack/glance-ks-endpoints-8bgp4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8827d41ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-ks-endpoints-8bgp4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8827d41ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1c8000c1-1dd8-41a3-9251-60cf6138c967,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1c8000c1-1dd8-41a3-9251-60cf6138c967,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-ks-endpoints-8bgp4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1c8000c1-1dd8-41a3-9251-60cf6138c967;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=1c8000c1-1dd8-41a3-9251-60cf6138c967;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8827d41ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 identity=42471 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1c8000c1-1dd8-41a3-9251-60cf6138c967,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1c8000c1-1dd8-41a3-9251-60cf6138c967,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-ks-endpoints-8bgp4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8827d41ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 identity=42471 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-ks-endpoints-8bgp4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8827d41ef datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=541 identity=42471 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-ks-endpoints-8bgp4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8827d41ef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=541 identity=42471 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-ks-endpoints-8bgp4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b8827d41ef endpointID=541 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-8bgp4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1c8000c1-1dd8-41a3-9251-60cf6138c967 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=1c8000c1-1dd8-41a3-9251-60cf6138c967 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b8827d41ef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=541 identity=42471 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-ks-endpoints-8bgp4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 1df1c7e7-8b8f-438d-8728-dedf00e49d43 default }" containerID=a366fbde4e805755b094234b2f6fe3a65a92efbbb84c11eef9ddf6a6b0202e26 datapathConfiguration="&{false false false false false }" interface=lxc60a29fe691d9 k8sPodName=openstack/glance-ks-user-xdsfp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a366fbde4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2578 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-xdsfp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a366fbde4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2578 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=47d2c344-fc61-499e-9868-2bc3ee17af71,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=47d2c344-fc61-499e-9868-2bc3ee17af71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-xdsfp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=47d2c344-fc61-499e-9868-2bc3ee17af71;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=47d2c344-fc61-499e-9868-2bc3ee17af71;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a366fbde4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2578 identity=20801 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=47d2c344-fc61-499e-9868-2bc3ee17af71,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=47d2c344-fc61-499e-9868-2bc3ee17af71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-xdsfp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a366fbde4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2578 identity=20801 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-xdsfp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a366fbde4e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2578 identity=20801 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-xdsfp subsys=endpoint level=info msg="Successful endpoint creation" containerID=a366fbde4e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2578 identity=20801 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-xdsfp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.129 551f39ec-cbe7-456b-86d9-cfe297b3cda0 default }" containerID=09c3a5e7e7973f80d7377f7837c2629f9986172f87ad5e63f6975c990185eb75 datapathConfiguration="&{false false false false false }" interface=lxc73985d9dc0e5 k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-64vcs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09c3a5e7e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-64vcs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09c3a5e7e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-64vcs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09c3a5e7e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identity=38155 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-64vcs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09c3a5e7e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identity=38155 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-64vcs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 71ffd5bb-93ef-466f-8c77-6e10972c7f3d default }" containerID=349f8277f07ee65fec52cbfab253ac4cb6ca999fd518b1f6f26f4261f8add605 datapathConfiguration="&{false false false false false }" interface=lxce8ac0e200367 k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-p52w4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=349f8277f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-p52w4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=349f8277f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-p52w4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook-version=v1.10.10;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=349f8277f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 identity=62215 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-p52w4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=349f8277f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 identity=62215 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-p52w4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=09c3a5e7e7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=47 identity=38155 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-64vcs subsys=endpoint level=info msg="Successful endpoint creation" containerID=09c3a5e7e7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=47 identity=38155 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-64vcs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=349f8277f0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=614 identity=62215 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-p52w4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=349f8277f0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=614 identity=62215 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-p52w4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a366fbde4e endpointID=2578 k8sNamespace=openstack k8sPodName=glance-ks-user-xdsfp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=47d2c344-fc61-499e-9868-2bc3ee17af71 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=47d2c344-fc61-499e-9868-2bc3ee17af71 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a366fbde4e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2578 identity=20801 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-xdsfp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 fd20a083-334b-40ad-a093-38b700e062bc default }" containerID=a63a6bea56077cfa5f23006277b81995f11229e66632b658715e4794ab2d1454 datapathConfiguration="&{false false false false false }" interface=lxcc97f09866c6f k8sPodName=openstack/glance-metadefs-load-sbbts labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a63a6bea56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-metadefs-load-sbbts subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a63a6bea56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b64844e0-701a-4927-a8ab-ab2f5cbc0831,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=b64844e0-701a-4927-a8ab-ab2f5cbc0831,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-metadefs-load-sbbts subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b64844e0-701a-4927-a8ab-ab2f5cbc0831;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=b64844e0-701a-4927-a8ab-ab2f5cbc0831;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a63a6bea56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 identity=42729 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b64844e0-701a-4927-a8ab-ab2f5cbc0831,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=b64844e0-701a-4927-a8ab-ab2f5cbc0831,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-metadefs-load-sbbts oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a63a6bea56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 identity=42729 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-metadefs-load-sbbts subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a63a6bea56 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1408 identity=42729 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-metadefs-load-sbbts subsys=endpoint level=info msg="Successful endpoint creation" containerID=a63a6bea56 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1408 identity=42729 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-metadefs-load-sbbts subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a63a6bea56 endpointID=1408 k8sNamespace=openstack k8sPodName=glance-metadefs-load-sbbts subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b64844e0-701a-4927-a8ab-ab2f5cbc0831 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=b64844e0-701a-4927-a8ab-ab2f5cbc0831 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a63a6bea56 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1408 identity=42729 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-metadefs-load-sbbts subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 619a2e98-5b48-4bd4-8080-8cb2e7d1f0be default }" containerID=04cbe039a500d46c6aa1d376b1f7d00ef6f3a836ecaaf9e43230d5d8c15b6390 datapathConfiguration="&{false false false false false }" interface=lxce4b04ea1ccee k8sPodName=openstack/glance-storage-init-qzzdx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04cbe039a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-storage-init-qzzdx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04cbe039a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=10d0bafe-1e70-4e17-b5db-d2abb5bab304,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=10d0bafe-1e70-4e17-b5db-d2abb5bab304,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-storage-init-qzzdx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=10d0bafe-1e70-4e17-b5db-d2abb5bab304;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=10d0bafe-1e70-4e17-b5db-d2abb5bab304;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04cbe039a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identity=61088 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=10d0bafe-1e70-4e17-b5db-d2abb5bab304,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=10d0bafe-1e70-4e17-b5db-d2abb5bab304,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-storage-init-qzzdx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04cbe039a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identity=61088 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-storage-init-qzzdx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=04cbe039a5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=17 identity=61088 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-storage-init-qzzdx subsys=endpoint level=info msg="Successful endpoint creation" containerID=04cbe039a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=17 identity=61088 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-storage-init-qzzdx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=04cbe039a5 endpointID=17 k8sNamespace=openstack k8sPodName=glance-storage-init-qzzdx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=10d0bafe-1e70-4e17-b5db-d2abb5bab304 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=10d0bafe-1e70-4e17-b5db-d2abb5bab304 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=04cbe039a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=17 identity=61088 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-storage-init-qzzdx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 b6095918-6af8-4bc0-a3d2-5e9e23f14d36 default }" containerID=63ef8907abee40312028de5486bb88e282d708ea37816fb44b02ad8f01a1ae7d datapathConfiguration="&{false false false false false }" interface=lxccc26b457133e k8sPodName=openstack/glance-api-79fc66bc77-pktws labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63ef8907ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-api-79fc66bc77-pktws subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63ef8907ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-api-79fc66bc77-pktws subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=63ef8907ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-api-79fc66bc77-pktws line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63ef8907ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identity=18788 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-api-79fc66bc77-pktws oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63ef8907ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identity=18788 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-api-79fc66bc77-pktws subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63ef8907ab datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=452 identity=18788 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-api-79fc66bc77-pktws subsys=endpoint level=info msg="Successful endpoint creation" containerID=63ef8907ab datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=452 identity=18788 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-api-79fc66bc77-pktws subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.50 994e3c44-565a-4074-a1ac-3ae2d7ce4266 default }" containerID=8925fc543b861a2f20a198dfb37201cf23ee3a5af899e729db41dd225555b1cb datapathConfiguration="&{false false false false false }" interface=lxca96f3c1d49d3 k8sPodName=openstack/staffeln-api-68f85cbb55-dk77b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8925fc543b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3119 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/staffeln-api-68f85cbb55-dk77b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8925fc543b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3119 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/staffeln-api-68f85cbb55-dk77b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8925fc543b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3119 identity=53094 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/staffeln-api-68f85cbb55-dk77b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8925fc543b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3119 identity=53094 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/staffeln-api-68f85cbb55-dk77b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.203 4a1cad80-31f8-4818-9dad-5013f868fe97 default }" containerID=2ef2dded901d68e37c46912797a82cac3630b045244fb010693cfca01ae84d24 datapathConfiguration="&{false false false false false }" interface=lxc77a883601635 k8sPodName=openstack/staffeln-conductor-5bf96ff688-zxglf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ef2dded90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1141 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/staffeln-conductor-5bf96ff688-zxglf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ef2dded90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1141 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/staffeln-conductor-5bf96ff688-zxglf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ef2dded90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1141 identity=7308 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/staffeln-conductor-5bf96ff688-zxglf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ef2dded90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1141 identity=7308 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/staffeln-conductor-5bf96ff688-zxglf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8925fc543b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3119 identity=53094 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/staffeln-api-68f85cbb55-dk77b subsys=endpoint level=info msg="Successful endpoint creation" containerID=8925fc543b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3119 identity=53094 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/staffeln-api-68f85cbb55-dk77b subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.229 d5058c66-0411-40fb-bbb0-233a2e4bd0ff default }" containerID=539348a662802c5bbc7406f6d7952fd12afc476b5b1f8af68702f3375b2ec5a7 datapathConfiguration="&{false false false false false }" interface=lxc38819180fc29 k8sPodName=openstack/staffeln-db-init-rnkx5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=539348a662 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1943 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-init-rnkx5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=539348a662 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1943 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=84cd816f-ce9b-440c-953f-dd0187a993db,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=84cd816f-ce9b-440c-953f-dd0187a993db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-init-rnkx5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=84cd816f-ce9b-440c-953f-dd0187a993db;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=84cd816f-ce9b-440c-953f-dd0187a993db;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=539348a662 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1943 identity=17745 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=84cd816f-ce9b-440c-953f-dd0187a993db,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=84cd816f-ce9b-440c-953f-dd0187a993db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-init-rnkx5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=539348a662 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1943 identity=17745 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-init-rnkx5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ef2dded90 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1141 identity=7308 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/staffeln-conductor-5bf96ff688-zxglf subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ef2dded90 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1141 identity=7308 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/staffeln-conductor-5bf96ff688-zxglf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=539348a662 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1943 identity=17745 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-init-rnkx5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=539348a662 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1943 identity=17745 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-init-rnkx5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=539348a662 endpointID=1943 k8sNamespace=openstack k8sPodName=staffeln-db-init-rnkx5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=84cd816f-ce9b-440c-953f-dd0187a993db k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=84cd816f-ce9b-440c-953f-dd0187a993db k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=539348a662 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1943 identity=17745 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-init-rnkx5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 31aec443-2568-4e6c-b469-04c66a2235bf default }" containerID=8fd61819bc6780dae9b00c4b9b43f5f16a11be2b432724c45f8aaf860c2a6fd4 datapathConfiguration="&{false false false false false }" interface=lxc2d494d5d8da3 k8sPodName=openstack/staffeln-db-sync-k2xtb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8fd61819bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3313 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/staffeln-db-sync-k2xtb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8fd61819bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3313 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e3f501ac-4e33-4023-88e2-ede48441baf0,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=e3f501ac-4e33-4023-88e2-ede48441baf0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/staffeln-db-sync-k2xtb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=e3f501ac-4e33-4023-88e2-ede48441baf0;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=e3f501ac-4e33-4023-88e2-ede48441baf0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8fd61819bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3313 identity=65288 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e3f501ac-4e33-4023-88e2-ede48441baf0,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=e3f501ac-4e33-4023-88e2-ede48441baf0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/staffeln-db-sync-k2xtb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8fd61819bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3313 identity=65288 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/staffeln-db-sync-k2xtb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8fd61819bc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3313 identity=65288 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/staffeln-db-sync-k2xtb subsys=endpoint level=info msg="Successful endpoint creation" containerID=8fd61819bc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3313 identity=65288 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/staffeln-db-sync-k2xtb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager