level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.556243ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="89.333µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.808481ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="19.651µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=109.440913ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="11.49µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="15.39µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="50.812µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="60.562µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="63.372µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="436.342µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.5µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.693617ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.757522ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="35.051µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="32.021µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="166.425µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="84.822µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="68.492µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=54.697226ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="63.422µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="8.841µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.5µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.10.0.0/16 level=warning msg="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=klog level=error msg=k8sError error="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: Failed to watch *v2.CiliumNode: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=k8s level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=1.603023367s function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.64µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.005048ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.93µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.355699ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="10.16µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.44µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.31µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="29.691µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="16.27µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="45.701µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="299.368µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.09µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.8µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="224.186µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="813.703µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.192693ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.59µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="23.711µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.10 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.10 ipAddr.ipv6="" k8sNodeIP=199.19.213.10 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.10" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.20" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.10" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.10} {CiliumInternalIP 10.0.0.20}] 10.0.0.0/24 [] [] 10.0.0.109 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:40605" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.852993982s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="15.36µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="7.55µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="135.374µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="5.23µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=5.453701186s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.207 29f4a310-2a99-4923-a98f-875aebafb3ef default }" containerID=8099fce2709f8fc4c5fcec5d07e49213e890361b2918519f3f5b7cc26e6bdea0 datapathConfiguration="&{false false false false false }" interface=lxce1f11c713a4c k8sPodName=kube-system/coredns-67659f764b-z87cs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8099fce270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 ipv4=10.0.0.207 ipv6= k8sPodName=kube-system/coredns-67659f764b-z87cs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8099fce270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.207 ipv6= k8sPodName=kube-system/coredns-67659f764b-z87cs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8099fce270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.207 ipv6= k8sPodName=kube-system/coredns-67659f764b-z87cs line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8099fce270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=57909 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.207 ipv6= k8sPodName=kube-system/coredns-67659f764b-z87cs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8099fce270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=57909 ipv4=10.0.0.207 ipv6= k8sPodName=kube-system/coredns-67659f764b-z87cs subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=341.520059ms file-path=/var/run/cilium/state/templates/606001a19cc03b32a16257beed542ed10190faf9ba84e07bdc976b5da0306068/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.208 35282c89-a21a-4687-ba3c-279847a79506 default }" containerID=2339a6c32a45c7761f6f0fd3bc1e7f62859bedf30167a1bb58f04824bc57dd4d datapathConfiguration="&{false false false false false }" interface=lxcffb34caf3bc6 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6mxfk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2339a6c32a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 ipv4=10.0.0.208 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6mxfk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2339a6c32a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.208 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6mxfk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2339a6c32a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identity=3817 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.208 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6mxfk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2339a6c32a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identity=3817 ipv4=10.0.0.208 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6mxfk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 a48c3227-226e-4f46-af22-d3278e0662f6 default }" containerID=9273651a2597d4bc1170b0da2c28a76b65cd46306b44d182104e25842ec34b7e datapathConfiguration="&{false false false false false }" interface=lxc001f514f3774 k8sPodName=kube-system/coredns-7c96b6546b-6w9bt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9273651a25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 ipv4=10.0.0.197 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6w9bt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9273651a25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.197 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6w9bt subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9273651a25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 identity=57909 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.197 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6w9bt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9273651a25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 identity=57909 ipv4=10.0.0.197 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6w9bt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 9361c5ae-3e0d-4a40-bf0b-deb465a24310 default }" containerID=8fe9daefc1c8b3c5f4e4715f7573ffe127e8dbe90920c9eb0793b693e233a8e8 datapathConfiguration="&{false false false false false }" interface=lxc4bcedcd6bbe6 k8sPodName=cert-manager/cert-manager-75c4c745bc-7ss8s labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.59 7bc0ab7f-e1ea-4701-af4a-b9d1518945ae default }" containerID=b0f3ea1ebeb69908e4e9498739cdbb399c51c84b1e2bf5c3a782cc6ec2b9b8e7 datapathConfiguration="&{false false false false false }" interface=lxc349e9976074f k8sPodName=local-path-storage/local-path-provisioner-679c578f5-j8hzs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8fe9daefc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1791 ipv4=10.0.0.5 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7ss8s subsys=endpoint level=info msg="New endpoint" containerID=b0f3ea1ebe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3321 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-j8hzs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 05ef2379-f9a2-4beb-932c-ab24562614b5 default }" containerID=9e3857b58a7efa43ae2e3e607d8dca8288dd750085fe1875f01be7101e46785c datapathConfiguration="&{false false false false false }" interface=lxc29c8b5509f36 k8sPodName=cert-manager/cert-manager-startupapicheck-2bc69 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.136 45e38383-6b4d-4996-951d-b5374c4497cb default }" containerID=267b42d42f094c1cda7e28c2ad0675d921b8e85a52d7db0752dca1eff82f219b datapathConfiguration="&{false false false false false }" interface=lxc9f7d619ab6d4 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5wj2r labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.248 3731ccc1-0890-4296-9032-b1bad1923b18 default }" containerID=cc163b0419f1d5d26a9fb137b6caa5a67f61481bb0e7da65ca7a9b251861d358 datapathConfiguration="&{false false false false false }" interface=lxca7d2bede389e k8sPodName=kube-system/coredns-67659f764b-dpjmc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e3857b58a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=557 ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2bc69 subsys=endpoint level=info msg="New endpoint" containerID=267b42d42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1647 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5wj2r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8fe9daefc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1791 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.5 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7ss8s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0f3ea1ebe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3321 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-j8hzs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=cc163b0419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2104 ipv4=10.0.0.248 ipv6= k8sPodName=kube-system/coredns-67659f764b-dpjmc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e3857b58a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=557 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=46939364-5c13-4b63-9156-8a31b0f1f9b5,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=46939364-5c13-4b63-9156-8a31b0f1f9b5,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2bc69 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc163b0419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2104 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.248 ipv6= k8sPodName=kube-system/coredns-67659f764b-dpjmc subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cc163b0419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2104 identity=57909 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.248 ipv6= k8sPodName=kube-system/coredns-67659f764b-dpjmc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc163b0419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2104 identity=57909 ipv4=10.0.0.248 ipv6= k8sPodName=kube-system/coredns-67659f764b-dpjmc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=267b42d42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1647 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5wj2r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1094 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=8fe9daefc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1791 identity=20379 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.5 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7ss8s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8fe9daefc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1791 identity=20379 ipv4=10.0.0.5 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7ss8s subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2773 ipv4=10.0.0.109 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2773 identityLabels="reserved:health" ipv4=10.0.0.109 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2773 identity=4 identityLabels="reserved:health" ipv4=10.0.0.109 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b0f3ea1ebe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3321 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-j8hzs line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=9e3857b58a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=557 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2bc69 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=267b42d42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1647 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5wj2r line=611 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.04801206s file-path=/var/run/cilium/state/templates/258f7edd134bb5badaef808fd9c1467802ff9cdde0f37c019075dd7e4e040a03/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=cc163b0419 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2104 identity=57909 ipv4=10.0.0.248 ipv6= k8sPodName=kube-system/coredns-67659f764b-dpjmc subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc163b0419 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2104 identity=57909 ipv4=10.0.0.248 ipv6= k8sPodName=kube-system/coredns-67659f764b-dpjmc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9273651a25 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=278 identity=57909 ipv4=10.0.0.197 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6w9bt subsys=endpoint level=info msg="Successful endpoint creation" containerID=9273651a25 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=278 identity=57909 ipv4=10.0.0.197 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6w9bt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8fe9daefc1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1791 identity=20379 ipv4=10.0.0.5 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7ss8s subsys=endpoint level=info msg="Successful endpoint creation" containerID=8fe9daefc1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1791 identity=20379 ipv4=10.0.0.5 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7ss8s subsys=daemon level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0f3ea1ebe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3321 identity=46901 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-j8hzs oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=b0f3ea1ebe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3321 identity=46901 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-j8hzs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2773 identity=4 ipv4=10.0.0.109 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2339a6c32a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=329 identity=3817 ipv4=10.0.0.208 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6mxfk subsys=endpoint level=info msg="Successful endpoint creation" containerID=2339a6c32a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=329 identity=3817 ipv4=10.0.0.208 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-6mxfk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8099fce270 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=274 identity=57909 ipv4=10.0.0.207 ipv6= k8sPodName=kube-system/coredns-67659f764b-z87cs subsys=endpoint level=info msg="Successful endpoint creation" containerID=8099fce270 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=274 identity=57909 ipv4=10.0.0.207 ipv6= k8sPodName=kube-system/coredns-67659f764b-z87cs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b0f3ea1ebe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3321 identity=46901 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-j8hzs subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0f3ea1ebe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3321 identity=46901 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-j8hzs subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=46939364-5c13-4b63-9156-8a31b0f1f9b5;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=46939364-5c13-4b63-9156-8a31b0f1f9b5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e3857b58a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=557 identity=54299 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=46939364-5c13-4b63-9156-8a31b0f1f9b5,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=46939364-5c13-4b63-9156-8a31b0f1f9b5,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2bc69 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e3857b58a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=557 identity=54299 ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2bc69 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=267b42d42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1647 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5wj2r line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e3857b58a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=557 identity=54299 ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2bc69 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e3857b58a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=557 identity=54299 ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2bc69 subsys=daemon level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=267b42d42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1647 identity=16456 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5wj2r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=267b42d42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1647 identity=16456 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5wj2r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=267b42d42f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1647 identity=16456 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5wj2r subsys=endpoint level=info msg="Successful endpoint creation" containerID=267b42d42f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1647 identity=16456 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5wj2r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9273651a25 endpointID=278 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-6w9bt subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=9273651a25 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=278 identity=57909 ipv4=10.0.0.197 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6w9bt subsys=endpoint level=info msg="Delete endpoint request" containerID=9e3857b58a endpointID=557 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-2bc69 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=46939364-5c13-4b63-9156-8a31b0f1f9b5 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=46939364-5c13-4b63-9156-8a31b0f1f9b5 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=9e3857b58a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=557 identity=54299 ipv4=10.0.0.209 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2bc69 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 ca3f2b2f-ace8-4188-aa92-999ee36e299a default }" containerID=2391b05e31d845e9e73743f0a3ec5fa5d68f8008c27f85e4ff981144db003a19 datapathConfiguration="&{false false false false false }" interface=lxcfa7155f05cbd k8sPodName=ingress-nginx/ingress-nginx-admission-create-2hhcv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2391b05e31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2hhcv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2391b05e31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=9dc6da49-6757-49d8-973c-951221ff6a88,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=9dc6da49-6757-49d8-973c-951221ff6a88,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2hhcv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=9dc6da49-6757-49d8-973c-951221ff6a88;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=9dc6da49-6757-49d8-973c-951221ff6a88;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2391b05e31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 identity=8021 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=9dc6da49-6757-49d8-973c-951221ff6a88,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=9dc6da49-6757-49d8-973c-951221ff6a88,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2hhcv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2391b05e31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 identity=8021 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2hhcv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2391b05e31 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=825 identity=8021 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2hhcv subsys=endpoint level=info msg="Successful endpoint creation" containerID=2391b05e31 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=825 identity=8021 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2hhcv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2391b05e31 endpointID=825 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-2hhcv subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=9dc6da49-6757-49d8-973c-951221ff6a88 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=9dc6da49-6757-49d8-973c-951221ff6a88 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=2391b05e31 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=825 identity=8021 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2hhcv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 e3903f48-e580-4828-8dbc-93259fd0d70c default }" containerID=c025eac4eff22435b8155355afba33d356c8bce8fa737465a2e73df4836da68e datapathConfiguration="&{false false false false false }" interface=lxc30ed7ac3f78b k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hmtj5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c025eac4ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3274 ipv4=10.0.0.35 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hmtj5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c025eac4ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3274 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.35 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hmtj5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c025eac4ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3274 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.35 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hmtj5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c025eac4ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3274 identity=25374 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.35 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hmtj5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c025eac4ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3274 identity=25374 ipv4=10.0.0.35 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hmtj5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c025eac4ef datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3274 identity=25374 ipv4=10.0.0.35 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hmtj5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c025eac4ef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3274 identity=25374 ipv4=10.0.0.35 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hmtj5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.103 a4fdb6bc-beda-41c2-a6d4-2a8b631634e6 default }" containerID=0d999c3463566d3a9dabab5dbe267fa594de41f907c4093b182ccc5f3564f058 datapathConfiguration="&{false false false false false }" interface=lxccd41923b2759 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-88sd8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d999c3463 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 ipv4=10.0.0.103 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-88sd8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d999c3463 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=85a574b7-9ab5-4dfc-bef0-8e830aeba238,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=85a574b7-9ab5-4dfc-bef0-8e830aeba238,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.103 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-88sd8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=85a574b7-9ab5-4dfc-bef0-8e830aeba238;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=85a574b7-9ab5-4dfc-bef0-8e830aeba238;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d999c3463 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identity=3698 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=85a574b7-9ab5-4dfc-bef0-8e830aeba238,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=85a574b7-9ab5-4dfc-bef0-8e830aeba238,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.103 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-88sd8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d999c3463 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identity=3698 ipv4=10.0.0.103 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-88sd8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d999c3463 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2936 identity=3698 ipv4=10.0.0.103 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-88sd8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d999c3463 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2936 identity=3698 ipv4=10.0.0.103 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-88sd8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0d999c3463 endpointID=2936 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-88sd8 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=85a574b7-9ab5-4dfc-bef0-8e830aeba238 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=85a574b7-9ab5-4dfc-bef0-8e830aeba238 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=0d999c3463 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2936 identity=3698 ipv4=10.0.0.103 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-88sd8 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=04b0ea1f-94f4-4d44-b123-01698393e5af] Description:}]" policyAddRequest=4de8bef5-0919-42b9-b0e4-e9672f9f4d5f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=4de8bef5-0919-42b9-b0e4-e9672f9f4d5f policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=5e62a0c0-9aec-4e60-bd11-3f06a267ca47] Description:}]" policyAddRequest=dc0c63ff-f750-493c-9aad-6e27e2ec2c90 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=dc0c63ff-f750-493c-9aad-6e27e2ec2c90 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.243 84775a79-d889-44b7-bbfa-6d92d705307f default }" containerID=642044f5658e5464e490473e831b0b04944fbb001152014a7eaed2c930cbbccb datapathConfiguration="&{false false false false false }" interface=lxc1b5645b4632d k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hpk5q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=642044f565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hpk5q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=642044f565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hpk5q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=642044f565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identity=32709 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hpk5q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=642044f565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identity=32709 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hpk5q subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.159 089f6a3e-7d9c-4065-86a2-2e675c32ca5a default }" containerID=b68fe290d5ef2ec301e4f77c2e381ecbbead2e73b6378bf49a86b299544cef00 datapathConfiguration="&{false false false false false }" interface=lxc6ac11985db15 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2mlgn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b68fe290d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3852 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2mlgn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b68fe290d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3852 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2mlgn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b68fe290d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3852 identity=19591 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2mlgn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b68fe290d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3852 identity=19591 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2mlgn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=642044f565 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=141 identity=32709 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hpk5q subsys=endpoint level=info msg="Successful endpoint creation" containerID=642044f565 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=141 identity=32709 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hpk5q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b68fe290d5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3852 identity=19591 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2mlgn subsys=endpoint level=info msg="Successful endpoint creation" containerID=b68fe290d5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3852 identity=19591 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2mlgn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.221 eff016e0-92f0-495a-9749-b11e3febef98 default }" containerID=a4d03b42c2946bd40199ef93cd7d5fdeb29343cb5d66096e2e40f0d4f137084e datapathConfiguration="&{false false false false false }" interface=lxc81c090a99e91 k8sPodName=openstack/pxc-operator-7cff949c8b-x9wgx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4d03b42c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=588 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-x9wgx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4d03b42c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=588 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-x9wgx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a4d03b42c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=588 identity=28266 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-x9wgx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4d03b42c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=588 identity=28266 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-x9wgx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a4d03b42c2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=588 identity=28266 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-x9wgx subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4d03b42c2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=588 identity=28266 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-x9wgx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.127 eea8100d-49c7-4dce-a3e8-e5f520b8d4fb default }" containerID=9f4ef35552a4226a042d9005ee7e64f945d442f4cd2d12d4ae8d1b4f8ff4f2e5 datapathConfiguration="&{false false false false false }" interface=lxcc5887ee2bbdd k8sPodName=local-path-storage/helper-pod-create-pvc-d69f6862-2fd3-475c-bfdb-70365d813982 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f4ef35552 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d69f6862-2fd3-475c-bfdb-70365d813982 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f4ef35552 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d69f6862-2fd3-475c-bfdb-70365d813982 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9f4ef35552 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d69f6862-2fd3-475c-bfdb-70365d813982 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f4ef35552 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identity=30206 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d69f6862-2fd3-475c-bfdb-70365d813982 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f4ef35552 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identity=30206 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d69f6862-2fd3-475c-bfdb-70365d813982 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f4ef35552 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3134 identity=30206 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d69f6862-2fd3-475c-bfdb-70365d813982 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f4ef35552 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3134 identity=30206 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d69f6862-2fd3-475c-bfdb-70365d813982 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.210 67113a24-6113-434a-b833-5acd849662ff default }" containerID=a2561f57ad3a9001c4c10436960e4c159f4cf7c3dd60deadfb7ca0d2a42e7796 datapathConfiguration="&{false false false false false }" interface=lxcc7831969e211 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2561f57ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1184 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2561f57ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1184 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2561f57ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1184 identity=9185 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2561f57ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1184 identity=9185 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2561f57ad datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1184 identity=9185 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2561f57ad datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1184 identity=9185 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f4ef35552 endpointID=3134 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d69f6862-2fd3-475c-bfdb-70365d813982 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9f4ef35552 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3134 identity=30206 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d69f6862-2fd3-475c-bfdb-70365d813982 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 4281ae4f-4ccc-407d-9a97-187f2455b166 default }" containerID=88e61fc1a3db41df969e412e6af137cc8d4704f684b1ec1b21c0dcccf2e17528 datapathConfiguration="&{false false false false false }" interface=lxc8476005f439c k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88e61fc1a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88e61fc1a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=88e61fc1a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.112 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88e61fc1a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 identity=30542 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88e61fc1a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 identity=30542 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=88e61fc1a3 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=822 identity=30542 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=88e61fc1a3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=822 identity=30542 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=b32203b1-5996-4d99-bb9e-cb183758b468] Description:}]" policyAddRequest=df5ee34b-fbd1-4bec-a679-51f92eccaf3f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=df5ee34b-fbd1-4bec-a679-51f92eccaf3f policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.3 ef853968-e71e-4991-85e8-6bd2ba9b672b default }" containerID=d0885436a00a1b70861c197d6fde90d8b04982a88c3987bdf68c774569ff7b30 datapathConfiguration="&{false false false false false }" interface=lxc85097e8ac3e2 k8sPodName=local-path-storage/helper-pod-create-pvc-075fc112-d607-405f-a4a3-0229721b2637 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0885436a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=883 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-075fc112-d607-405f-a4a3-0229721b2637 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0885436a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=883 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-075fc112-d607-405f-a4a3-0229721b2637 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d0885436a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=883 identity=30206 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-075fc112-d607-405f-a4a3-0229721b2637 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0885436a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=883 identity=30206 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-075fc112-d607-405f-a4a3-0229721b2637 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d0885436a0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=883 identity=30206 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-075fc112-d607-405f-a4a3-0229721b2637 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0885436a0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=883 identity=30206 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-075fc112-d607-405f-a4a3-0229721b2637 subsys=daemon level=info msg="Delete endpoint request" containerID=d0885436a0 endpointID=883 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-075fc112-d607-405f-a4a3-0229721b2637 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d0885436a0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=883 identity=30206 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-075fc112-d607-405f-a4a3-0229721b2637 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 a71b4d66-468f-44c5-a0d3-25c07d1e6677 default }" containerID=c560b3f010a08c4e2d1dc6a0a029c3c8630ea375d0612a521664fa5d3106dbb6 datapathConfiguration="&{false false false false false }" interface=lxc1fbfcda9a284 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c560b3f010 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2636 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c560b3f010 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2636 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c560b3f010 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2636 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.104 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c560b3f010 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2636 identity=17791 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c560b3f010 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2636 identity=17791 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c560b3f010 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2636 identity=17791 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c560b3f010 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2636 identity=17791 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=34541764-6599-4e8c-9448-4ee90cce2645] Description:}]" policyAddRequest=c850f60d-063a-47ce-a5ae-d4f8bb315700 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=c850f60d-063a-47ce-a5ae-d4f8bb315700 policyRevision=5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.42 daa38493-ebd7-4b9c-b3b3-6595b71b43c7 default }" containerID=2bcf97ca968d1fb1a82af09c4fe5989d846c8413f14b6ec46d7716feeb7719c8 datapathConfiguration="&{false false false false false }" interface=lxc15fa5a219314 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2bcf97ca96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 ipv4=10.0.0.42 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2bcf97ca96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.42 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2bcf97ca96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=12270 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.42 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2bcf97ca96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=12270 ipv4=10.0.0.42 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2bcf97ca96 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=249 identity=12270 ipv4=10.0.0.42 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2bcf97ca96 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=249 identity=12270 ipv4=10.0.0.42 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.011315216362086924 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.215 76afc72e-3472-4450-8d59-0604e5554692 default }" containerID=0fe569e227b899f6a4fbd69e48e3797938176a59a3e136ccddcf066873028529 datapathConfiguration="&{false false false false false }" interface=lxcd287f21fa047 k8sPodName=monitoring/node-feature-discovery-worker-p7dvw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fe569e227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1678 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-p7dvw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 8acb1ab0-f101-4bea-bf5c-aa63ac4ee0f1 default }" containerID=dfc460113a3b35e7c992d45dfcbcdbfaaec4002ec2368f9328fdd5fdacca34a2 datapathConfiguration="&{false false false false false }" interface=lxc47e921c1eb24 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-czv7w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dfc460113a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-czv7w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dfc460113a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-czv7w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=0fe569e227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1678 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-p7dvw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dfc460113a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-czv7w line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dfc460113a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 identity=3809 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-czv7w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dfc460113a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 identity=3809 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-czv7w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=0fe569e227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1678 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-p7dvw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0fe569e227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1678 identity=62562 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-p7dvw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fe569e227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1678 identity=62562 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-p7dvw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 6616d283-50aa-4377-999d-0c403aa43831 default }" containerID=a9059340bed35042af1c4211215d3676347c3d8dab9c62ac025a1a6f7c97accc datapathConfiguration="&{false false false false false }" interface=lxcc237b7ef187b k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sqbbt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9059340be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sqbbt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9059340be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sqbbt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9059340be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 identity=7731 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sqbbt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9059340be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 identity=7731 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sqbbt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dfc460113a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1622 identity=3809 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-czv7w subsys=endpoint level=info msg="Successful endpoint creation" containerID=dfc460113a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1622 identity=3809 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-czv7w subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0fe569e227 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1678 identity=62562 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-p7dvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fe569e227 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1678 identity=62562 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-p7dvw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a9059340be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3736 identity=7731 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sqbbt subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9059340be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3736 identity=7731 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sqbbt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.7 99f5825a-a93f-4af1-befc-1b33a5b83d0e default }" containerID=88e26cd7bac9f03fcdebf88f16afa4ff0b7c5d5eb8e8682fb3ad340ef01de9f2 datapathConfiguration="&{false false false false false }" interface=lxce6709a4dfd17 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-t7qt2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88e26cd7ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3759 ipv4=10.0.0.7 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-t7qt2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88e26cd7ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3759 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.7 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-t7qt2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88e26cd7ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3759 identity=20864 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.7 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-t7qt2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88e26cd7ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3759 identity=20864 ipv4=10.0.0.7 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-t7qt2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=88e26cd7ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3759 identity=20864 ipv4=10.0.0.7 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-t7qt2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=88e26cd7ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3759 identity=20864 ipv4=10.0.0.7 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-t7qt2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1094 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-171-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01094 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01094 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01094 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01094:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1094 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 4441e252-bd95-4f65-95ec-dc02fcbbfa7b default }" containerID=1c94a581c5c41a89640ea6b02def26c3f6202c655ac52a1073934bb9f7adf257 datapathConfiguration="&{false false false false false }" interface=lxcb150676937d0 k8sPodName=monitoring/kube-prometheus-stack-admission-create-gvzr9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c94a581c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=738 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gvzr9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c94a581c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=738 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=44e0d53e-0af5-4ce4-9af8-66fe227468e6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=44e0d53e-0af5-4ce4-9af8-66fe227468e6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gvzr9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=44e0d53e-0af5-4ce4-9af8-66fe227468e6;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=44e0d53e-0af5-4ce4-9af8-66fe227468e6;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c94a581c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=738 identity=30064 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=44e0d53e-0af5-4ce4-9af8-66fe227468e6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=44e0d53e-0af5-4ce4-9af8-66fe227468e6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gvzr9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c94a581c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=738 identity=30064 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gvzr9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1c94a581c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=738 identity=30064 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gvzr9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c94a581c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=738 identity=30064 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gvzr9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1c94a581c5 endpointID=738 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-gvzr9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=44e0d53e-0af5-4ce4-9af8-66fe227468e6 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=44e0d53e-0af5-4ce4-9af8-66fe227468e6 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=1c94a581c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=738 identity=30064 ipv4=10.0.0.103 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gvzr9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 2f7afbfc-9cbe-4977-b978-93202aaf0ba7 default }" containerID=1a4f6881d46161e978445772a9d0bbeab651dbc815f9d91112f6c1f8a5eb64d0 datapathConfiguration="&{false false false false false }" interface=lxc36d3aecf8346 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tj65p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a4f6881d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tj65p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a4f6881d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tj65p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a4f6881d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identity=29518 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tj65p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a4f6881d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identity=29518 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tj65p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1a4f6881d4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1854 identity=29518 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tj65p subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a4f6881d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1854 identity=29518 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tj65p subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.185 c07c2ec3-9c5d-4643-981f-da9df1627f40 default }" containerID=8613eb72ec9218d62afbacb1c49e5c8f16fc9cc3cc2bcb4930adc2e19b9275b3 datapathConfiguration="&{false false false false false }" interface=lxc9845e6775991 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-scs7r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8613eb72ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-scs7r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8613eb72ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-scs7r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.48 1e5d1cb2-b2d5-410b-a8be-f867590450c4 default }" containerID=52d81a1df25360c3b64da642be877c4f5a0bb08a8aa823be9cbf1d231fe7d8cf datapathConfiguration="&{false false false false false }" interface=lxc4932291bb6a9 k8sPodName=monitoring/kube-prometheus-stack-grafana-bbcd7d97-fk5c7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52d81a1df2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3782 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bbcd7d97-fk5c7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52d81a1df2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3782 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bbcd7d97-fk5c7 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8613eb72ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=45958 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-scs7r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8613eb72ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=45958 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-scs7r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52d81a1df2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3782 identity=25766 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bbcd7d97-fk5c7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52d81a1df2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3782 identity=25766 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bbcd7d97-fk5c7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8613eb72ec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=665 identity=45958 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-scs7r subsys=endpoint level=info msg="Successful endpoint creation" containerID=8613eb72ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=665 identity=45958 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-scs7r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=52d81a1df2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3782 identity=25766 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bbcd7d97-fk5c7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=52d81a1df2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3782 identity=25766 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-bbcd7d97-fk5c7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.56 31e1ee89-3d98-4594-b9d5-d37f0d0ed9ab default }" containerID=6a27955fab1b4b1d5c4506bc474bfa1631b9fab64d4cdd2389216c66de5e73a6 datapathConfiguration="&{false false false false false }" interface=lxcade51a63ee06 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-cd44b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a27955fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-cd44b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a27955fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=d382315d-b204-4839-96e0-b88cbd6eb871,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d382315d-b204-4839-96e0-b88cbd6eb871,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-cd44b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=d382315d-b204-4839-96e0-b88cbd6eb871;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=d382315d-b204-4839-96e0-b88cbd6eb871;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a27955fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 identity=27314 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=d382315d-b204-4839-96e0-b88cbd6eb871,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d382315d-b204-4839-96e0-b88cbd6eb871,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-cd44b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a27955fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 identity=27314 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-cd44b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a27955fab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3368 identity=27314 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-cd44b subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a27955fab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3368 identity=27314 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-cd44b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6a27955fab endpointID=3368 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-cd44b subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=d382315d-b204-4839-96e0-b88cbd6eb871 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=d382315d-b204-4839-96e0-b88cbd6eb871 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=6a27955fab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3368 identity=27314 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-cd44b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 93764939-a0ee-4571-8bcd-5f1bc0c078e4 default }" containerID=0e1c1ca2043269c25cc8146ed58ff6c1c60afc2d51759cb5e61f0f6e74647e33 datapathConfiguration="&{false false false false false }" interface=lxc6fd65830eeeb k8sPodName=local-path-storage/helper-pod-create-pvc-42ff52ee-555e-49da-af7c-938f7a906804 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e1c1ca204 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=172 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ff52ee-555e-49da-af7c-938f7a906804 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e1c1ca204 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=172 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ff52ee-555e-49da-af7c-938f7a906804 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e1c1ca204 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=172 identity=30206 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ff52ee-555e-49da-af7c-938f7a906804 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e1c1ca204 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=172 identity=30206 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ff52ee-555e-49da-af7c-938f7a906804 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e1c1ca204 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=172 identity=30206 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ff52ee-555e-49da-af7c-938f7a906804 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e1c1ca204 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=172 identity=30206 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ff52ee-555e-49da-af7c-938f7a906804 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.189 3b351825-0fa8-4ced-ab18-a4811cff117c default }" containerID=b2c6a9805bb7639ff7dde5b22836636098d629cc4dba0a1f73e6d1b972e82388 datapathConfiguration="&{false false false false false }" interface=lxceac704692566 k8sPodName=local-path-storage/helper-pod-create-pvc-3d2a7b8b-9c17-4651-8293-7bf67151068b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2c6a9805b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d2a7b8b-9c17-4651-8293-7bf67151068b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2c6a9805b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d2a7b8b-9c17-4651-8293-7bf67151068b subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b2c6a9805b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identity=30206 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d2a7b8b-9c17-4651-8293-7bf67151068b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2c6a9805b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identity=30206 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d2a7b8b-9c17-4651-8293-7bf67151068b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2c6a9805b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=868 identity=30206 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d2a7b8b-9c17-4651-8293-7bf67151068b subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2c6a9805b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=868 identity=30206 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d2a7b8b-9c17-4651-8293-7bf67151068b subsys=daemon level=info msg="Delete endpoint request" containerID=0e1c1ca204 endpointID=172 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-42ff52ee-555e-49da-af7c-938f7a906804 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=b2c6a9805b endpointID=868 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3d2a7b8b-9c17-4651-8293-7bf67151068b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0e1c1ca204 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=172 identity=30206 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ff52ee-555e-49da-af7c-938f7a906804 subsys=endpoint level=info msg="Removed endpoint" containerID=b2c6a9805b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=868 identity=30206 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d2a7b8b-9c17-4651-8293-7bf67151068b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 aff69176-9f79-46a9-b9b6-b39d363321eb default }" containerID=bc2d5aa8dc720a1b69f7a246472d710ecdedff05e75e1dafc99c4586f13e7558 datapathConfiguration="&{false false false false false }" interface=lxc54c59a71d23f k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc2d5aa8dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3572 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc2d5aa8dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3572 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bc2d5aa8dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3572 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc2d5aa8dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3572 identity=1415 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc2d5aa8dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3572 identity=1415 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 f40c72b3-3318-42d4-af1e-15b9f40e36f0 default }" containerID=91cadc929702ff5b9c393a48a5d348b78e73a638fbc1c3da6cced65ef316509f datapathConfiguration="&{false false false false false }" interface=lxc292fd9d3b5a3 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91cadc9297 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91cadc9297 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91cadc9297 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 identity=3411 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91cadc9297 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 identity=3411 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc2d5aa8dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3572 identity=1415 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc2d5aa8dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3572 identity=1415 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=91cadc9297 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=190 identity=3411 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=91cadc9297 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=190 identity=3411 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.18 7b02dbd9-032a-47da-8f25-5d1588443887 default }" containerID=c00a6a9a9d23407de79c77b600c5ec958494cdc283ca1e48c0acd389754abf6a datapathConfiguration="&{false false false false false }" interface=lxcdd759166139b k8sPodName=monitoring/loki-gateway-cf54cb88c-8t68x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c00a6a9a9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2107 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-8t68x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c00a6a9a9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2107 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-8t68x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c00a6a9a9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2107 identity=37116 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-8t68x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c00a6a9a9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2107 identity=37116 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-8t68x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 1cf531da-788a-4edb-ad4c-4e891a0193ea default }" containerID=cc796d720ffb5cc99917fffa16c40e7adc89c70b9230b53f5c82983caa23fea0 datapathConfiguration="&{false false false false false }" interface=lxc2b5f4cd210ed k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc796d720f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc796d720f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.242 8f0015ff-d7b7-4fe9-bc7d-b8cc85a6ff76 default }" containerID=3635b31df4577efc8d1443835a7f530cff6002b7196e836796ae77569e2a8e61 datapathConfiguration="&{false false false false false }" interface=lxc903c1a6d0a9c k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3635b31df4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3635b31df4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc796d720f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identity=48851 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc796d720f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identity=48851 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3635b31df4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 identity=37565 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3635b31df4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 identity=37565 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c00a6a9a9d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2107 identity=37116 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-8t68x subsys=endpoint level=info msg="Successful endpoint creation" containerID=c00a6a9a9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2107 identity=37116 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-8t68x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cc796d720f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=772 identity=48851 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc796d720f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=772 identity=48851 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3635b31df4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2239 identity=37565 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3635b31df4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2239 identity=37565 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.252 fbf14c4f-5ca1-433d-8b9c-8b3c515d3626 default }" containerID=9814be55bde2647732e373d81d871bbabda55ec51d6191a20552f62b69256d75 datapathConfiguration="&{false false false false false }" interface=lxc3830bf1e572c k8sPodName=local-path-storage/helper-pod-create-pvc-670c6074-efcf-488b-b791-4f411bd118c1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9814be55bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1672 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-670c6074-efcf-488b-b791-4f411bd118c1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9814be55bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1672 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-670c6074-efcf-488b-b791-4f411bd118c1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9814be55bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1672 identity=30206 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-670c6074-efcf-488b-b791-4f411bd118c1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9814be55bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1672 identity=30206 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-670c6074-efcf-488b-b791-4f411bd118c1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9814be55bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1672 identity=30206 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-670c6074-efcf-488b-b791-4f411bd118c1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9814be55bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1672 identity=30206 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-670c6074-efcf-488b-b791-4f411bd118c1 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.166 387beb80-9711-4974-81a0-c50dcdc4b868 default }" containerID=96a33db7fa200ac80cce27f9c3c2adf3f5a40e2abb3bc0d53b98fa3114c375a3 datapathConfiguration="&{false false false false false }" interface=lxca67407989a2c k8sPodName=monitoring/vector-hcck2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96a33db7fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/vector-hcck2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96a33db7fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/vector-hcck2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96a33db7fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 identity=45911 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/vector-hcck2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96a33db7fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 identity=45911 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/vector-hcck2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96a33db7fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3196 identity=45911 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/vector-hcck2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=96a33db7fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3196 identity=45911 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/vector-hcck2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9814be55bd endpointID=1672 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-670c6074-efcf-488b-b791-4f411bd118c1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9814be55bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1672 identity=30206 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-670c6074-efcf-488b-b791-4f411bd118c1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 7cfe7190-5d85-464d-8ed7-40992932b8a7 default }" containerID=c8903fea4e00233d5acebdc4c12eff1d10373b29455f0a5e2d264fffd3966691 datapathConfiguration="&{false false false false false }" interface=lxc08fc3555fe83 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8903fea4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1358 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8903fea4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1358 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c8903fea4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1358 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8903fea4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1358 identity=7706 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8903fea4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1358 identity=7706 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8903fea4e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1358 identity=7706 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8903fea4e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1358 identity=7706 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.118 abc5b75c-e81f-48fe-aabc-49455a9d96ae default }" containerID=9bec396c9ffc6b90226981495db0aae7e3d3b478d1f2f8707105eb422fa5c0e9 datapathConfiguration="&{false false false false false }" interface=lxc7a90ce83d73e k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wfsw8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9bec396c9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wfsw8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9bec396c9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wfsw8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9bec396c9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identity=53907 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wfsw8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9bec396c9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identity=53907 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wfsw8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9bec396c9f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=785 identity=53907 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wfsw8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9bec396c9f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=785 identity=53907 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wfsw8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.199 5559473e-5676-4877-a014-3ca57e3c0cb2 default }" containerID=5d9b5768680f5438db06ebf9edd990c8b662569e6669d3b6ec92e00e67892922 datapathConfiguration="&{false false false false false }" interface=lxceb7498ebc579 k8sPodName=openstack/memcached-memcached-6479589586-26wcn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d9b576868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1967 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-26wcn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d9b576868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1967 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-26wcn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d9b576868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1967 identity=45108 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-26wcn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d9b576868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1967 identity=45108 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-26wcn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5d9b576868 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1967 identity=45108 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-26wcn subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d9b576868 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1967 identity=45108 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-26wcn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.211 a16f2da3-4e9a-4f3a-8ba4-10418dfaaf01 default }" containerID=d081e6c6981fa6bfee9a0a7cc04afc58e17c0421e72ba31982b9d14df1f48e32 datapathConfiguration="&{false false false false false }" interface=lxc0c583b573ac7 k8sPodName=local-path-storage/helper-pod-create-pvc-a7757bc3-5453-46bb-966d-ec9454da2092 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d081e6c698 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7757bc3-5453-46bb-966d-ec9454da2092 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d081e6c698 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7757bc3-5453-46bb-966d-ec9454da2092 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d081e6c698 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identity=30206 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7757bc3-5453-46bb-966d-ec9454da2092 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d081e6c698 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identity=30206 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7757bc3-5453-46bb-966d-ec9454da2092 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d081e6c698 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1912 identity=30206 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7757bc3-5453-46bb-966d-ec9454da2092 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d081e6c698 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1912 identity=30206 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7757bc3-5453-46bb-966d-ec9454da2092 subsys=daemon level=info msg="Delete endpoint request" containerID=d081e6c698 endpointID=1912 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a7757bc3-5453-46bb-966d-ec9454da2092 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d081e6c698 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1912 identity=30206 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7757bc3-5453-46bb-966d-ec9454da2092 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 d4293f6d-b56e-4828-88b1-dd5a202f9e18 default }" containerID=3410fa88e4ff9b9d3b9a71c1ed1e89f18fc1b15a9af3ec53f514f3f633464f3a datapathConfiguration="&{false false false false false }" interface=lxc67e65b2ace28 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3410fa88e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3410fa88e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3410fa88e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3410fa88e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identity=62656 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3410fa88e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identity=62656 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3410fa88e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=923 identity=62656 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3410fa88e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=923 identity=62656 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.191 ba7283c4-88e0-4f6a-8c9f-c663a9b2d983 default }" containerID=b958ffae1dcff06450a99defcdd137cccdf2c687f2dc737e9dbe44c39c1f606c datapathConfiguration="&{false false false false false }" interface=lxc653a8540f5bc k8sPodName=openstack/keystone-api-5b887b9ccc-tqftq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b958ffae1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-api-5b887b9ccc-tqftq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b958ffae1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-api-5b887b9ccc-tqftq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b958ffae1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 identity=4985 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-api-5b887b9ccc-tqftq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b958ffae1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 identity=4985 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-api-5b887b9ccc-tqftq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b958ffae1d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2073 identity=4985 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-api-5b887b9ccc-tqftq subsys=endpoint level=info msg="Successful endpoint creation" containerID=b958ffae1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2073 identity=4985 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-api-5b887b9ccc-tqftq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.139 d5907985-85fb-4e96-b4c4-c62132fdccb5 default }" containerID=d9701708bbed6488b98afbcf22e06dde8625c2988a116f504bfd6b5b434971e2 datapathConfiguration="&{false false false false false }" interface=lxcf101ff515d1d k8sPodName=openstack/keystone-credential-setup-fqtzw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9701708bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3226 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-fqtzw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9701708bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3226 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=24bdc09e-7b50-46cd-aa64-53ec0567e7db,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=24bdc09e-7b50-46cd-aa64-53ec0567e7db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-fqtzw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=24bdc09e-7b50-46cd-aa64-53ec0567e7db;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=24bdc09e-7b50-46cd-aa64-53ec0567e7db;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9701708bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3226 identity=27876 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=24bdc09e-7b50-46cd-aa64-53ec0567e7db,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=24bdc09e-7b50-46cd-aa64-53ec0567e7db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-fqtzw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9701708bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3226 identity=27876 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-fqtzw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d9701708bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3226 identity=27876 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-fqtzw subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9701708bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3226 identity=27876 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-fqtzw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d9701708bb endpointID=3226 k8sNamespace=openstack k8sPodName=keystone-credential-setup-fqtzw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=24bdc09e-7b50-46cd-aa64-53ec0567e7db k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=24bdc09e-7b50-46cd-aa64-53ec0567e7db k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d9701708bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3226 identity=27876 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-fqtzw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 9c0b211f-619d-4bef-9831-5d6669d90298 default }" containerID=d337f34a31274747b09c2f14be9f0324c55840b114f19d9d0812f0afb4a3d9f2 datapathConfiguration="&{false false false false false }" interface=lxcd1b04191e231 k8sPodName=openstack/keystone-db-init-twwsk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d337f34a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-init-twwsk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d337f34a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bef8510f-94b3-4fc1-81cb-02f56fce513a,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=bef8510f-94b3-4fc1-81cb-02f56fce513a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-init-twwsk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bef8510f-94b3-4fc1-81cb-02f56fce513a;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=bef8510f-94b3-4fc1-81cb-02f56fce513a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d337f34a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identity=32971 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bef8510f-94b3-4fc1-81cb-02f56fce513a,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=bef8510f-94b3-4fc1-81cb-02f56fce513a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-init-twwsk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d337f34a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identity=32971 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-init-twwsk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d337f34a31 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=391 identity=32971 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-init-twwsk subsys=endpoint level=info msg="Successful endpoint creation" containerID=d337f34a31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=391 identity=32971 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-init-twwsk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d337f34a31 endpointID=391 k8sNamespace=openstack k8sPodName=keystone-db-init-twwsk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bef8510f-94b3-4fc1-81cb-02f56fce513a k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=bef8510f-94b3-4fc1-81cb-02f56fce513a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d337f34a31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=391 identity=32971 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-init-twwsk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 00c6de6c-5c56-403a-b128-e8374294cdc9 default }" containerID=5247b6228f8f2b56fbbe7d81707f0d3596d70ed12db9a0c7626b0a6958274084 datapathConfiguration="&{false false false false false }" interface=lxc0f7c9c5a64a0 k8sPodName=openstack/keystone-fernet-setup-86jrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5247b6228f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-fernet-setup-86jrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5247b6228f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2d46693d-ef9f-4962-a22e-b52d12558c7c,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=2d46693d-ef9f-4962-a22e-b52d12558c7c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-fernet-setup-86jrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2d46693d-ef9f-4962-a22e-b52d12558c7c;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=2d46693d-ef9f-4962-a22e-b52d12558c7c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=5247b6228f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-fernet-setup-86jrj line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5247b6228f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 identity=31329 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2d46693d-ef9f-4962-a22e-b52d12558c7c,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=2d46693d-ef9f-4962-a22e-b52d12558c7c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-fernet-setup-86jrj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5247b6228f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 identity=31329 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-fernet-setup-86jrj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5247b6228f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1135 identity=31329 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-fernet-setup-86jrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=5247b6228f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1135 identity=31329 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-fernet-setup-86jrj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5247b6228f endpointID=1135 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-86jrj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2d46693d-ef9f-4962-a22e-b52d12558c7c k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=2d46693d-ef9f-4962-a22e-b52d12558c7c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5247b6228f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1135 identity=31329 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-fernet-setup-86jrj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 54e4e43a-d67e-423e-8e03-58bc31deea2d default }" containerID=a6157e973f5b2fe7d3ad522e6397cc46df701ef0ddb262903daef546f1b2b3f4 datapathConfiguration="&{false false false false false }" interface=lxc99b8c3b38f69 k8sPodName=openstack/keystone-db-sync-f8txq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6157e973f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-sync-f8txq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6157e973f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4eccece1-2b1b-4275-9636-6abf3efa27b9,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=4eccece1-2b1b-4275-9636-6abf3efa27b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-sync-f8txq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a6157e973f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-sync-f8txq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4eccece1-2b1b-4275-9636-6abf3efa27b9;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=4eccece1-2b1b-4275-9636-6abf3efa27b9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6157e973f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identity=12529 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4eccece1-2b1b-4275-9636-6abf3efa27b9,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=4eccece1-2b1b-4275-9636-6abf3efa27b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-sync-f8txq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6157e973f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identity=12529 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-sync-f8txq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6157e973f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=89 identity=12529 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-sync-f8txq subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6157e973f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=89 identity=12529 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-sync-f8txq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a6157e973f endpointID=89 k8sNamespace=openstack k8sPodName=keystone-db-sync-f8txq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4eccece1-2b1b-4275-9636-6abf3efa27b9 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=4eccece1-2b1b-4275-9636-6abf3efa27b9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a6157e973f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=89 identity=12529 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-sync-f8txq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 5d9fd7bd-683b-4ed9-9308-84b74514d8bd default }" containerID=064d7a3f224b2b4ecd6709b8edb3110392be29d60f3f007b0d0f28bd1bea740e datapathConfiguration="&{false false false false false }" interface=lxca4154d8bbfb8 k8sPodName=openstack/keystone-rabbit-init-rgc2z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=064d7a3f22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-rgc2z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=064d7a3f22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=22d0f7e4-14af-42eb-b2a2-48e8573e07a6,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=22d0f7e4-14af-42eb-b2a2-48e8573e07a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-rgc2z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=22d0f7e4-14af-42eb-b2a2-48e8573e07a6;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=22d0f7e4-14af-42eb-b2a2-48e8573e07a6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=064d7a3f22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=25209 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=22d0f7e4-14af-42eb-b2a2-48e8573e07a6,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=22d0f7e4-14af-42eb-b2a2-48e8573e07a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-rgc2z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=064d7a3f22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=25209 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-rgc2z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=064d7a3f22 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=45 identity=25209 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-rgc2z subsys=endpoint level=info msg="Successful endpoint creation" containerID=064d7a3f22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=45 identity=25209 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-rgc2z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=064d7a3f22 endpointID=45 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-rgc2z subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=22d0f7e4-14af-42eb-b2a2-48e8573e07a6 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=22d0f7e4-14af-42eb-b2a2-48e8573e07a6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=064d7a3f22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=45 identity=25209 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-rgc2z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 972800a2-7997-47e2-bad9-ea3d21e28f02 default }" containerID=0a575ff8dac16bcf20595387b3b291d1abe674a4b8a123f9414445393c098f04 datapathConfiguration="&{false false false false false }" interface=lxc4cc17077e823 k8sPodName=openstack/keystone-domain-manage-427bn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a575ff8da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-domain-manage-427bn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a575ff8da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=af50524d-479b-4264-936f-478ec1edac9f,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=af50524d-479b-4264-936f-478ec1edac9f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-domain-manage-427bn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=af50524d-479b-4264-936f-478ec1edac9f;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=af50524d-479b-4264-936f-478ec1edac9f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a575ff8da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identity=20386 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=af50524d-479b-4264-936f-478ec1edac9f,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=af50524d-479b-4264-936f-478ec1edac9f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-domain-manage-427bn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a575ff8da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identity=20386 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-domain-manage-427bn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0a575ff8da datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=156 identity=20386 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-domain-manage-427bn subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a575ff8da datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=156 identity=20386 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-domain-manage-427bn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0a575ff8da endpointID=156 k8sNamespace=openstack k8sPodName=keystone-domain-manage-427bn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=af50524d-479b-4264-936f-478ec1edac9f k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=af50524d-479b-4264-936f-478ec1edac9f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0a575ff8da datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=156 identity=20386 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-domain-manage-427bn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 4fd6b4bd-c780-4f1f-88a4-8da86abca728 default }" containerID=f10a0f28c954256e85dfcc53a98da757344e4c205294067ac078fc385eeacf0f datapathConfiguration="&{false false false false false }" interface=lxc2e29d13c115b k8sPodName=openstack/keystone-bootstrap-6j9st labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f10a0f28c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-bootstrap-6j9st subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f10a0f28c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=14adbd54-536d-475e-aaa2-4310a26a411a,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=14adbd54-536d-475e-aaa2-4310a26a411a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-bootstrap-6j9st subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=14adbd54-536d-475e-aaa2-4310a26a411a;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=14adbd54-536d-475e-aaa2-4310a26a411a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f10a0f28c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 identity=54368 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=14adbd54-536d-475e-aaa2-4310a26a411a,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=14adbd54-536d-475e-aaa2-4310a26a411a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-bootstrap-6j9st oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f10a0f28c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 identity=54368 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-bootstrap-6j9st subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f10a0f28c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2159 identity=54368 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-bootstrap-6j9st subsys=endpoint level=info msg="Successful endpoint creation" containerID=f10a0f28c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2159 identity=54368 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-bootstrap-6j9st subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f10a0f28c9 endpointID=2159 k8sNamespace=openstack k8sPodName=keystone-bootstrap-6j9st subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=14adbd54-536d-475e-aaa2-4310a26a411a k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=14adbd54-536d-475e-aaa2-4310a26a411a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f10a0f28c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2159 identity=54368 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-bootstrap-6j9st subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 5175142c-502d-4939-8db5-5e570cfd7aed default }" containerID=33f988e8efc725a2b4cab103a46fdacf11aabe4679f917cadb942e7a982b9187 datapathConfiguration="&{false false false false false }" interface=lxc4b3e48cfe891 k8sPodName=local-path-storage/helper-pod-create-pvc-1d3f7ba8-dfe0-49e5-9fa8-72521fa8d0fc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33f988e8ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d3f7ba8-dfe0-49e5-9fa8-72521fa8d0fc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33f988e8ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d3f7ba8-dfe0-49e5-9fa8-72521fa8d0fc subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33f988e8ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identity=30206 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d3f7ba8-dfe0-49e5-9fa8-72521fa8d0fc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33f988e8ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identity=30206 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d3f7ba8-dfe0-49e5-9fa8-72521fa8d0fc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33f988e8ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1350 identity=30206 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d3f7ba8-dfe0-49e5-9fa8-72521fa8d0fc subsys=endpoint level=info msg="Successful endpoint creation" containerID=33f988e8ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1350 identity=30206 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d3f7ba8-dfe0-49e5-9fa8-72521fa8d0fc subsys=daemon level=info msg="Delete endpoint request" containerID=33f988e8ef endpointID=1350 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1d3f7ba8-dfe0-49e5-9fa8-72521fa8d0fc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=33f988e8ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1350 identity=30206 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d3f7ba8-dfe0-49e5-9fa8-72521fa8d0fc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 f897b72a-8716-468a-9078-9bef45e48eee default }" containerID=4f60e13ae7790378cdf841c82992ff5d9d97be430d3275c5c56c09c07fefbb2f datapathConfiguration="&{false false false false false }" interface=lxc74c05c760bf1 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f60e13ae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f60e13ae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f60e13ae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identity=29504 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f60e13ae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identity=29504 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4f60e13ae7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=164 identity=29504 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f60e13ae7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=164 identity=29504 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.137 ca80c983-ac68-4bad-8d8a-0fb2debec72c default }" containerID=78614b24479ca780867304f8a975609ef92f1d1653a131560b84ba8d7c44e5eb datapathConfiguration="&{false false false false false }" interface=lxcb37d8035b82e k8sPodName=openstack/barbican-api-9dbcb9476-zrqj2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78614b2447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3989 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-9dbcb9476-zrqj2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78614b2447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3989 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-9dbcb9476-zrqj2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78614b2447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3989 identity=25393 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-9dbcb9476-zrqj2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78614b2447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3989 identity=25393 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-9dbcb9476-zrqj2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.244 13c0d6ab-527c-4a2c-9ea2-5006146568c2 default }" containerID=cca7c9fcb5970d2b328be21188d334463194a731f974c65e69b56aab96ec2dad datapathConfiguration="&{false false false false false }" interface=lxc1e1179235e66 k8sPodName=openstack/barbican-db-init-c4x8b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cca7c9fcb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-db-init-c4x8b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cca7c9fcb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2248a162-6efe-48f3-8239-a6f8d6ecc101,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=2248a162-6efe-48f3-8239-a6f8d6ecc101,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-db-init-c4x8b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2248a162-6efe-48f3-8239-a6f8d6ecc101;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=2248a162-6efe-48f3-8239-a6f8d6ecc101;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cca7c9fcb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identity=8568 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2248a162-6efe-48f3-8239-a6f8d6ecc101,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=2248a162-6efe-48f3-8239-a6f8d6ecc101,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-db-init-c4x8b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cca7c9fcb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identity=8568 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-db-init-c4x8b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=78614b2447 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3989 identity=25393 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-9dbcb9476-zrqj2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=78614b2447 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3989 identity=25393 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-9dbcb9476-zrqj2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cca7c9fcb5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3418 identity=8568 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-db-init-c4x8b subsys=endpoint level=info msg="Successful endpoint creation" containerID=cca7c9fcb5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3418 identity=8568 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-db-init-c4x8b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cca7c9fcb5 endpointID=3418 k8sNamespace=openstack k8sPodName=barbican-db-init-c4x8b subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2248a162-6efe-48f3-8239-a6f8d6ecc101 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=2248a162-6efe-48f3-8239-a6f8d6ecc101 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=cca7c9fcb5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3418 identity=8568 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-db-init-c4x8b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 73922fc4-8a76-4666-a66a-2278ebd2ff9c default }" containerID=c461e447547c7f7142ae5fa006141e965dcb7a3e5cf989ae44c1b491502e8f91 datapathConfiguration="&{false false false false false }" interface=lxc96dc9e73304d k8sPodName=openstack/barbican-db-sync-z7qj6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c461e44754 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2053 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-sync-z7qj6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c461e44754 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2053 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3872a782-8025-46a8-83cc-a217c6e3e340,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=3872a782-8025-46a8-83cc-a217c6e3e340,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-sync-z7qj6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3872a782-8025-46a8-83cc-a217c6e3e340;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=3872a782-8025-46a8-83cc-a217c6e3e340;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c461e44754 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2053 identity=3604 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3872a782-8025-46a8-83cc-a217c6e3e340,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=3872a782-8025-46a8-83cc-a217c6e3e340,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-sync-z7qj6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c461e44754 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2053 identity=3604 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-sync-z7qj6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c461e44754 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2053 identity=3604 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-sync-z7qj6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c461e44754 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2053 identity=3604 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-sync-z7qj6 subsys=daemon level=info msg="Delete endpoint request" containerID=c461e44754 endpointID=2053 k8sNamespace=openstack k8sPodName=barbican-db-sync-z7qj6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3872a782-8025-46a8-83cc-a217c6e3e340 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=3872a782-8025-46a8-83cc-a217c6e3e340 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c461e44754 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2053 identity=3604 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-db-sync-z7qj6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 4f14d97a-3b51-4d60-96c2-48f40b21ffab default }" containerID=0e5725c78f2ea6b8b72f767b3292e324d1ed0aad6d94a2d666bdd2655b16fa78 datapathConfiguration="&{false false false false false }" interface=lxca31569bb631e k8sPodName=openstack/barbican-rabbit-init-vflvh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e5725c78f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2798 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-rabbit-init-vflvh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e5725c78f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2798 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6736cc77-d7fe-404e-9008-e9f553f2428a,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6736cc77-d7fe-404e-9008-e9f553f2428a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-rabbit-init-vflvh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=6736cc77-d7fe-404e-9008-e9f553f2428a;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=6736cc77-d7fe-404e-9008-e9f553f2428a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e5725c78f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2798 identity=1314 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6736cc77-d7fe-404e-9008-e9f553f2428a,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6736cc77-d7fe-404e-9008-e9f553f2428a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-rabbit-init-vflvh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e5725c78f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2798 identity=1314 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-rabbit-init-vflvh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0e5725c78f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2798 identity=1314 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-rabbit-init-vflvh subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e5725c78f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2798 identity=1314 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-rabbit-init-vflvh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0e5725c78f endpointID=2798 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-vflvh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=6736cc77-d7fe-404e-9008-e9f553f2428a k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=6736cc77-d7fe-404e-9008-e9f553f2428a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0e5725c78f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2798 identity=1314 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-rabbit-init-vflvh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 22f03817-041c-46ee-8564-1294808e8d8f default }" containerID=21e9f935c3b6dd13ac1bcedbda403fb137bfed4c321d99fdc86a260f3aa9b24f datapathConfiguration="&{false false false false false }" interface=lxc5a5236d23d16 k8sPodName=openstack/barbican-ks-service-j45lj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21e9f935c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-service-j45lj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21e9f935c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ef5206ec-5560-4640-ad5c-18b118aa0bde,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=ef5206ec-5560-4640-ad5c-18b118aa0bde,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-service-j45lj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ef5206ec-5560-4640-ad5c-18b118aa0bde;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=ef5206ec-5560-4640-ad5c-18b118aa0bde;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21e9f935c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identity=5572 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ef5206ec-5560-4640-ad5c-18b118aa0bde,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=ef5206ec-5560-4640-ad5c-18b118aa0bde,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-service-j45lj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=21e9f935c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identity=5572 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-service-j45lj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=21e9f935c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=103 identity=5572 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-service-j45lj subsys=endpoint level=info msg="Successful endpoint creation" containerID=21e9f935c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=103 identity=5572 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-service-j45lj subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036120091441557214 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=21e9f935c3 endpointID=103 k8sNamespace=openstack k8sPodName=barbican-ks-service-j45lj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ef5206ec-5560-4640-ad5c-18b118aa0bde k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=ef5206ec-5560-4640-ad5c-18b118aa0bde k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=21e9f935c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=103 identity=5572 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-service-j45lj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 1c5ccc62-f611-433c-9220-a3533425a147 default }" containerID=685885223a05425fbfb53b3bbe2ab8dfdd3c0ce80c46dd6cc586448f7cf08030 datapathConfiguration="&{false false false false false }" interface=lxcc9c48fe22886 k8sPodName=openstack/barbican-ks-endpoints-lj5jh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=685885223a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-ks-endpoints-lj5jh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=685885223a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8394dbf4-19d4-4fe5-a795-4490880ec17d,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8394dbf4-19d4-4fe5-a795-4490880ec17d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-ks-endpoints-lj5jh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8394dbf4-19d4-4fe5-a795-4490880ec17d;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=8394dbf4-19d4-4fe5-a795-4490880ec17d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=685885223a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 identity=11857 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8394dbf4-19d4-4fe5-a795-4490880ec17d,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8394dbf4-19d4-4fe5-a795-4490880ec17d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-ks-endpoints-lj5jh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=685885223a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 identity=11857 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-ks-endpoints-lj5jh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=685885223a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2022 identity=11857 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-ks-endpoints-lj5jh subsys=endpoint level=info msg="Successful endpoint creation" containerID=685885223a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2022 identity=11857 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-ks-endpoints-lj5jh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=685885223a endpointID=2022 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-lj5jh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8394dbf4-19d4-4fe5-a795-4490880ec17d k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=8394dbf4-19d4-4fe5-a795-4490880ec17d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=685885223a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2022 identity=11857 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-ks-endpoints-lj5jh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 ad3c27f8-2a9a-41e3-a8fb-2b7b409fc32c default }" containerID=de08ff6a1ae8f9f4a728540d73f92a11a417b11d5d3afc2b0b7f6adddf3323d7 datapathConfiguration="&{false false false false false }" interface=lxcb9e4f326070a k8sPodName=openstack/barbican-ks-user-g9hxn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de08ff6a1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-user-g9hxn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de08ff6a1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2f9f834e-8622-4e04-b58a-05ca37f02478,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=2f9f834e-8622-4e04-b58a-05ca37f02478,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-user-g9hxn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2f9f834e-8622-4e04-b58a-05ca37f02478;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=2f9f834e-8622-4e04-b58a-05ca37f02478;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de08ff6a1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=7101 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2f9f834e-8622-4e04-b58a-05ca37f02478,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=2f9f834e-8622-4e04-b58a-05ca37f02478,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-user-g9hxn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=de08ff6a1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=7101 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-user-g9hxn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de08ff6a1a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=108 identity=7101 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-user-g9hxn subsys=endpoint level=info msg="Successful endpoint creation" containerID=de08ff6a1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=108 identity=7101 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-user-g9hxn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=de08ff6a1a endpointID=108 k8sNamespace=openstack k8sPodName=barbican-ks-user-g9hxn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2f9f834e-8622-4e04-b58a-05ca37f02478 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=2f9f834e-8622-4e04-b58a-05ca37f02478 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=de08ff6a1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=108 identity=7101 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-user-g9hxn subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.130 235251f8-1d68-48b8-843a-08d352566eaa default }" containerID=8d8e11bb94d70b40a1ce9d9907c90cb11d5dc00180f2bc94b5e085897245068f datapathConfiguration="&{false false false false false }" interface=lxc97a822547476 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-64cf4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d8e11bb94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 ipv4=10.0.0.130 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-64cf4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d8e11bb94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.130 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-64cf4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8d8e11bb94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.130 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-64cf4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d8e11bb94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 identity=65231 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.130 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-64cf4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d8e11bb94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 identity=65231 ipv4=10.0.0.130 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-64cf4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d8e11bb94 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1058 identity=65231 ipv4=10.0.0.130 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-64cf4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d8e11bb94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1058 identity=65231 ipv4=10.0.0.130 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-64cf4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.165 97f8e531-2901-43fd-b7fe-7e5a4cab84b4 default }" containerID=989ce30a2f8bbc458b56b48b3cea750953c4a7b596f3ae64f74ca0a2940bc836 datapathConfiguration="&{false false false false false }" interface=lxceb2754791e57 k8sPodName=openstack/rook-ceph-detect-version-7xfz9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=989ce30a2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7xfz9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=989ce30a2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=2507adc8-1700-425c-b931-ea4e4d339ab8,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=2507adc8-1700-425c-b931-ea4e4d339ab8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7xfz9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=2507adc8-1700-425c-b931-ea4e4d339ab8;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=2507adc8-1700-425c-b931-ea4e4d339ab8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=989ce30a2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identity=31286 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=2507adc8-1700-425c-b931-ea4e4d339ab8,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=2507adc8-1700-425c-b931-ea4e4d339ab8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7xfz9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=989ce30a2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identity=31286 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7xfz9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=989ce30a2f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=89 identity=31286 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7xfz9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=989ce30a2f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=89 identity=31286 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7xfz9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=989ce30a2f endpointID=89 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-7xfz9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=2507adc8-1700-425c-b931-ea4e4d339ab8 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=2507adc8-1700-425c-b931-ea4e4d339ab8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=989ce30a2f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=89 identity=31286 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7xfz9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 20e46fe5-8e0d-467d-864f-28e2f049e175 default }" containerID=09dcd3e6c644e427a7007db7234927031c4ec670e85a889d0e83821dfc44e24c datapathConfiguration="&{false false false false false }" interface=lxc6c5e10c65453 k8sPodName=openstack/ceph-object-controller-detect-version-ws2qg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09dcd3e6c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3394 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ws2qg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09dcd3e6c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3394 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=fe954b09-1431-4ded-b520-9a02893e482b,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=fe954b09-1431-4ded-b520-9a02893e482b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ws2qg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=fe954b09-1431-4ded-b520-9a02893e482b;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=fe954b09-1431-4ded-b520-9a02893e482b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09dcd3e6c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3394 identity=20364 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=fe954b09-1431-4ded-b520-9a02893e482b,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=fe954b09-1431-4ded-b520-9a02893e482b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ws2qg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=09dcd3e6c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3394 identity=20364 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ws2qg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=09dcd3e6c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3394 identity=20364 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ws2qg subsys=endpoint level=info msg="Successful endpoint creation" containerID=09dcd3e6c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3394 identity=20364 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ws2qg subsys=daemon level=info msg="Delete endpoint request" containerID=09dcd3e6c6 endpointID=3394 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-ws2qg subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=fe954b09-1431-4ded-b520-9a02893e482b k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=fe954b09-1431-4ded-b520-9a02893e482b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=09dcd3e6c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3394 identity=20364 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ws2qg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 4cc7d184-a146-485c-84d6-defeded9a38d default }" containerID=de26559787ed22b67ace20de01dd56d52b0e70d3f8820185583c024f0768d4f8 datapathConfiguration="&{false false false false false }" interface=lxcad9a714f667a k8sPodName=local-path-storage/helper-pod-create-pvc-c31b9736-2c17-4cc2-a52e-6eb6996896e0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de26559787 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c31b9736-2c17-4cc2-a52e-6eb6996896e0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de26559787 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c31b9736-2c17-4cc2-a52e-6eb6996896e0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de26559787 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 identity=30206 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c31b9736-2c17-4cc2-a52e-6eb6996896e0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de26559787 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 identity=30206 ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c31b9736-2c17-4cc2-a52e-6eb6996896e0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de26559787 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1223 identity=30206 ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c31b9736-2c17-4cc2-a52e-6eb6996896e0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=de26559787 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1223 identity=30206 ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c31b9736-2c17-4cc2-a52e-6eb6996896e0 subsys=daemon level=info msg="Delete endpoint request" containerID=de26559787 endpointID=1223 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c31b9736-2c17-4cc2-a52e-6eb6996896e0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=de26559787 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1223 identity=30206 ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c31b9736-2c17-4cc2-a52e-6eb6996896e0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 98ecc7e2-08e9-4497-b69a-9dbf30b4f394 default }" containerID=2c3669da5d4f21122f051058bfa4dfe608b6ad06e3da2e71f6d14a8e38d0ee59 datapathConfiguration="&{false false false false false }" interface=lxcec9eacc3ce50 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c3669da5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2750 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c3669da5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2750 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c3669da5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2750 identity=14502 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c3669da5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2750 identity=14502 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2c3669da5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2750 identity=14502 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c3669da5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2750 identity=14502 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.127 9c62e9c6-0341-41f8-a650-3ef2d122831d default }" containerID=2cde7267eb867c0afb3487174276729debf31916f6d0d429572977afb74a7c0f datapathConfiguration="&{false false false false false }" interface=lxc930571ef7387 k8sPodName=openstack/glance-db-init-xhtw6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2cde7267eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3887 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-init-xhtw6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2cde7267eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3887 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3323cf03-8424-41ed-8882-8d2c9ed852c8,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=3323cf03-8424-41ed-8882-8d2c9ed852c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-init-xhtw6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2cde7267eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3887 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-init-xhtw6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3323cf03-8424-41ed-8882-8d2c9ed852c8;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=3323cf03-8424-41ed-8882-8d2c9ed852c8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2cde7267eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3887 identity=9853 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3323cf03-8424-41ed-8882-8d2c9ed852c8,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=3323cf03-8424-41ed-8882-8d2c9ed852c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-init-xhtw6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2cde7267eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3887 identity=9853 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-init-xhtw6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2cde7267eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3887 identity=9853 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-init-xhtw6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2cde7267eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3887 identity=9853 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-init-xhtw6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.247 e29847f0-6072-4d87-8ed7-3c242c566a82 default }" containerID=56483098eb41d62c39f3a7d93e3482c3202f4c91e13635bdda600199ccb71c6b datapathConfiguration="&{false false false false false }" interface=lxccd2488b9c28f k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-gd94k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56483098eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-gd94k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56483098eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-gd94k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Delete endpoint request" containerID=2cde7267eb endpointID=3887 k8sNamespace=openstack k8sPodName=glance-db-init-xhtw6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3323cf03-8424-41ed-8882-8d2c9ed852c8 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=3323cf03-8424-41ed-8882-8d2c9ed852c8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=56483098eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-gd94k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56483098eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identity=5944 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-gd94k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56483098eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identity=5944 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-gd94k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 5ad70dd0-9a82-4167-8516-4f33a6e471ed default }" containerID=bb6fa68ef04c333306278373db921378743ac557659d5ddd6a137caee51b7b3e datapathConfiguration="&{false false false false false }" interface=lxccfa5655c4d48 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cd2zm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb6fa68ef0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cd2zm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb6fa68ef0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cd2zm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb6fa68ef0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 identity=46114 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cd2zm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb6fa68ef0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=854 identity=46114 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cd2zm subsys=endpoint level=info msg="Removed endpoint" containerID=2cde7267eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3887 identity=9853 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-init-xhtw6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=56483098eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=818 identity=5944 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-gd94k subsys=endpoint level=info msg="Successful endpoint creation" containerID=56483098eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=818 identity=5944 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-gd94k subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bb6fa68ef0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=854 identity=46114 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cd2zm subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb6fa68ef0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=854 identity=46114 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cd2zm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.80 b8595a8f-d1dd-45a8-8c04-f1f567091fc9 default }" containerID=354f84dd26f35f9ffedf1ab342d9c6a3816d2abf9ff4d204bf9b8133567a38e2 datapathConfiguration="&{false false false false false }" interface=lxc86e2897065cc k8sPodName=openstack/glance-db-sync-ck6dm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=354f84dd26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3458 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-db-sync-ck6dm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=354f84dd26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3458 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ec1cc6cf-8307-4ebb-b638-a0c54e4a9aa7,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=ec1cc6cf-8307-4ebb-b638-a0c54e4a9aa7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-db-sync-ck6dm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ec1cc6cf-8307-4ebb-b638-a0c54e4a9aa7;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=ec1cc6cf-8307-4ebb-b638-a0c54e4a9aa7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=354f84dd26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3458 identity=49400 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ec1cc6cf-8307-4ebb-b638-a0c54e4a9aa7,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=ec1cc6cf-8307-4ebb-b638-a0c54e4a9aa7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-db-sync-ck6dm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=354f84dd26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3458 identity=49400 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-db-sync-ck6dm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=354f84dd26 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3458 identity=49400 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-db-sync-ck6dm subsys=endpoint level=info msg="Successful endpoint creation" containerID=354f84dd26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3458 identity=49400 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-db-sync-ck6dm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=354f84dd26 endpointID=3458 k8sNamespace=openstack k8sPodName=glance-db-sync-ck6dm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ec1cc6cf-8307-4ebb-b638-a0c54e4a9aa7 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=ec1cc6cf-8307-4ebb-b638-a0c54e4a9aa7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=354f84dd26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3458 identity=49400 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-db-sync-ck6dm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 a141f544-24fb-4e5e-aac6-dc4eb418b2ff default }" containerID=a5b8f719f07aa12719c333dacd3e1bd17285db18ac4c165368888ac735e02495 datapathConfiguration="&{false false false false false }" interface=lxcf9ded1685eb4 k8sPodName=openstack/glance-rabbit-init-cjslh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5b8f719f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1587 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-rabbit-init-cjslh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5b8f719f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1587 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eb5a9c5b-9493-4b56-a032-c11ed1193213,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=eb5a9c5b-9493-4b56-a032-c11ed1193213,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-rabbit-init-cjslh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a5b8f719f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1587 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-rabbit-init-cjslh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=eb5a9c5b-9493-4b56-a032-c11ed1193213;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=eb5a9c5b-9493-4b56-a032-c11ed1193213;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5b8f719f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1587 identity=20004 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eb5a9c5b-9493-4b56-a032-c11ed1193213,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=eb5a9c5b-9493-4b56-a032-c11ed1193213,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-rabbit-init-cjslh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5b8f719f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1587 identity=20004 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-rabbit-init-cjslh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5b8f719f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1587 identity=20004 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-rabbit-init-cjslh subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5b8f719f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1587 identity=20004 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-rabbit-init-cjslh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a5b8f719f0 endpointID=1587 k8sNamespace=openstack k8sPodName=glance-rabbit-init-cjslh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=eb5a9c5b-9493-4b56-a032-c11ed1193213 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=eb5a9c5b-9493-4b56-a032-c11ed1193213 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a5b8f719f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1587 identity=20004 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-rabbit-init-cjslh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 b68ec6ea-d5eb-4320-959a-015ffc509250 default }" containerID=74f0d30d72024ea8ca37f6d4e851c2589d7ef4df78cf6a5d1f4f2941f986734b datapathConfiguration="&{false false false false false }" interface=lxc842563983a2c k8sPodName=openstack/glance-ks-service-wqn49 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74f0d30d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-ks-service-wqn49 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74f0d30d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=55ab59c5-1ba3-4a0d-9764-a0b936e49f97,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=55ab59c5-1ba3-4a0d-9764-a0b936e49f97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-ks-service-wqn49 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=55ab59c5-1ba3-4a0d-9764-a0b936e49f97;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=55ab59c5-1ba3-4a0d-9764-a0b936e49f97;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74f0d30d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=59825 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=55ab59c5-1ba3-4a0d-9764-a0b936e49f97,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=55ab59c5-1ba3-4a0d-9764-a0b936e49f97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-ks-service-wqn49 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74f0d30d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=59825 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-ks-service-wqn49 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=74f0d30d72 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=462 identity=59825 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-ks-service-wqn49 subsys=endpoint level=info msg="Successful endpoint creation" containerID=74f0d30d72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=462 identity=59825 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-ks-service-wqn49 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=74f0d30d72 endpointID=462 k8sNamespace=openstack k8sPodName=glance-ks-service-wqn49 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=55ab59c5-1ba3-4a0d-9764-a0b936e49f97 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=55ab59c5-1ba3-4a0d-9764-a0b936e49f97 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=74f0d30d72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=462 identity=59825 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-ks-service-wqn49 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 044cb2ee-a377-4cd8-bbde-31d400092ae4 default }" containerID=a63f4cacd49dc5c223f935a34e4e3d321e328f018e765f268c1b7bea840718cd datapathConfiguration="&{false false false false false }" interface=lxcbc74cb3a8cda k8sPodName=openstack/glance-ks-endpoints-rj7fm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a63f4cacd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2534 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-ks-endpoints-rj7fm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a63f4cacd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2534 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=495b5870-ebcb-41b8-8f6d-bab10b085920,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=495b5870-ebcb-41b8-8f6d-bab10b085920,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-ks-endpoints-rj7fm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=495b5870-ebcb-41b8-8f6d-bab10b085920;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=495b5870-ebcb-41b8-8f6d-bab10b085920;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a63f4cacd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2534 identity=6547 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=495b5870-ebcb-41b8-8f6d-bab10b085920,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=495b5870-ebcb-41b8-8f6d-bab10b085920,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-ks-endpoints-rj7fm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a63f4cacd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2534 identity=6547 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-ks-endpoints-rj7fm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a63f4cacd4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2534 identity=6547 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-ks-endpoints-rj7fm subsys=endpoint level=info msg="Successful endpoint creation" containerID=a63f4cacd4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2534 identity=6547 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-ks-endpoints-rj7fm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a63f4cacd4 endpointID=2534 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-rj7fm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=495b5870-ebcb-41b8-8f6d-bab10b085920 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=495b5870-ebcb-41b8-8f6d-bab10b085920 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a63f4cacd4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2534 identity=6547 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-ks-endpoints-rj7fm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 3550c646-a7ba-472f-ae6a-81d23fc6101d default }" containerID=2be18e35419129208b749e1bbdb4569f62ed94e5f02d8b6c2fc4c64dbaa57a9e datapathConfiguration="&{false false false false false }" interface=lxc098d55a663cb k8sPodName=openstack/glance-ks-user-4lf54 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2be18e3541 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-user-4lf54 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2be18e3541 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=60006ba1-9cb8-41a9-87ce-a030b1b50e93,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=60006ba1-9cb8-41a9-87ce-a030b1b50e93,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-user-4lf54 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=60006ba1-9cb8-41a9-87ce-a030b1b50e93;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=60006ba1-9cb8-41a9-87ce-a030b1b50e93;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2be18e3541 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 identity=969 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=60006ba1-9cb8-41a9-87ce-a030b1b50e93,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=60006ba1-9cb8-41a9-87ce-a030b1b50e93,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-user-4lf54 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2be18e3541 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 identity=969 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-user-4lf54 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2be18e3541 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2691 identity=969 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-user-4lf54 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2be18e3541 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2691 identity=969 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-user-4lf54 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2be18e3541 endpointID=2691 k8sNamespace=openstack k8sPodName=glance-ks-user-4lf54 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=60006ba1-9cb8-41a9-87ce-a030b1b50e93 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=60006ba1-9cb8-41a9-87ce-a030b1b50e93 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2be18e3541 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2691 identity=969 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-user-4lf54 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 982f784b-2900-4af1-a32a-90ae3fcbe4f0 default }" containerID=4803069c60d71c8616debe8a219e01c2e6e50e0de398e4819bb07373dff3f5b3 datapathConfiguration="&{false false false false false }" interface=lxca3dd2cf0c331 k8sPodName=openstack/glance-metadefs-load-jdvf5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4803069c60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-jdvf5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4803069c60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8145133d-961c-4fc7-bcdd-a13a373c0d2c,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=8145133d-961c-4fc7-bcdd-a13a373c0d2c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-jdvf5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8145133d-961c-4fc7-bcdd-a13a373c0d2c;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=8145133d-961c-4fc7-bcdd-a13a373c0d2c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4803069c60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 identity=418 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8145133d-961c-4fc7-bcdd-a13a373c0d2c,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=8145133d-961c-4fc7-bcdd-a13a373c0d2c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-jdvf5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4803069c60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 identity=418 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-jdvf5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4803069c60 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1648 identity=418 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-jdvf5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4803069c60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1648 identity=418 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-jdvf5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4803069c60 endpointID=1648 k8sNamespace=openstack k8sPodName=glance-metadefs-load-jdvf5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8145133d-961c-4fc7-bcdd-a13a373c0d2c k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=8145133d-961c-4fc7-bcdd-a13a373c0d2c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4803069c60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1648 identity=418 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-jdvf5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 076d3496-d883-4797-95dc-38f036c12c39 default }" containerID=5bcb8c62093287550c6a5ccfede3cb7d228b7d233ca61d00576f62ac3345d1fd datapathConfiguration="&{false false false false false }" interface=lxc7daac3cb1f41 k8sPodName=openstack/glance-storage-init-778lc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5bcb8c6209 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-778lc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5bcb8c6209 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=62c9c949-9cf5-4f3b-9813-dcf0313ebaea,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=62c9c949-9cf5-4f3b-9813-dcf0313ebaea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-778lc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=62c9c949-9cf5-4f3b-9813-dcf0313ebaea;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=62c9c949-9cf5-4f3b-9813-dcf0313ebaea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5bcb8c6209 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=38684 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=62c9c949-9cf5-4f3b-9813-dcf0313ebaea,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=62c9c949-9cf5-4f3b-9813-dcf0313ebaea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-778lc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5bcb8c6209 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=38684 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-778lc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5bcb8c6209 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=714 identity=38684 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-778lc subsys=endpoint level=info msg="Successful endpoint creation" containerID=5bcb8c6209 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=714 identity=38684 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-778lc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5bcb8c6209 endpointID=714 k8sNamespace=openstack k8sPodName=glance-storage-init-778lc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=62c9c949-9cf5-4f3b-9813-dcf0313ebaea k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=62c9c949-9cf5-4f3b-9813-dcf0313ebaea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5bcb8c6209 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=714 identity=38684 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-778lc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 d4a49751-2845-4807-aa05-084f581dae09 default }" containerID=3bd4e147817f207f76924272cfad373eb0effcd0f51bfa8df786bb2aaee79294 datapathConfiguration="&{false false false false false }" interface=lxc0158d395eba5 k8sPodName=openstack/glance-api-5d75f9bc66-rdl44 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bd4e14781 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-api-5d75f9bc66-rdl44 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bd4e14781 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-api-5d75f9bc66-rdl44 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bd4e14781 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 identity=4656 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-api-5d75f9bc66-rdl44 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bd4e14781 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 identity=4656 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-api-5d75f9bc66-rdl44 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3bd4e14781 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=927 identity=4656 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-api-5d75f9bc66-rdl44 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bd4e14781 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=927 identity=4656 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-api-5d75f9bc66-rdl44 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.12 0c03b0b6-2019-4cc2-b37f-b2dd3aeada06 default }" containerID=6c0c4721cb0192c625fa60e65500b39f91262aa2462f8ba7802c1fb66d73c632 datapathConfiguration="&{false false false false false }" interface=lxcaae2ed964d0c k8sPodName=openstack/staffeln-api-6678f67cf7-sd9g2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c0c4721cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2534 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-api-6678f67cf7-sd9g2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c0c4721cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2534 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-api-6678f67cf7-sd9g2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c0c4721cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2534 identity=55723 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-api-6678f67cf7-sd9g2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6c0c4721cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2534 identity=55723 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-api-6678f67cf7-sd9g2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 5f822a42-18ec-4077-83f9-46f939bb587e default }" containerID=7430ed4af44e09bd3d08653b8d5e2a6833cc659388a17c79effce553baee57e0 datapathConfiguration="&{false false false false false }" interface=lxc1739f78670ce k8sPodName=openstack/staffeln-conductor-59b9f67954-xrjtn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7430ed4af4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-conductor-59b9f67954-xrjtn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7430ed4af4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-conductor-59b9f67954-xrjtn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7430ed4af4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identity=26608 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-conductor-59b9f67954-xrjtn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7430ed4af4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identity=26608 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-conductor-59b9f67954-xrjtn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 6b2aa25d-a59f-424e-bfc0-1fb11d237a33 default }" containerID=3faa12ce534a3201514d942d436d4cd0e9b9f02cc658d05f347c9ab14bee32eb datapathConfiguration="&{false false false false false }" interface=lxcf039dac42aa1 k8sPodName=openstack/staffeln-db-init-bs8zx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3faa12ce53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1415 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/staffeln-db-init-bs8zx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3faa12ce53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1415 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=3f503955-5a72-42cf-816b-5308ae865c04,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=3f503955-5a72-42cf-816b-5308ae865c04,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/staffeln-db-init-bs8zx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=3f503955-5a72-42cf-816b-5308ae865c04;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=3f503955-5a72-42cf-816b-5308ae865c04;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3faa12ce53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1415 identity=24758 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=3f503955-5a72-42cf-816b-5308ae865c04,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=3f503955-5a72-42cf-816b-5308ae865c04,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/staffeln-db-init-bs8zx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3faa12ce53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1415 identity=24758 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/staffeln-db-init-bs8zx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7430ed4af4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=395 identity=26608 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-conductor-59b9f67954-xrjtn subsys=endpoint level=info msg="Successful endpoint creation" containerID=7430ed4af4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=395 identity=26608 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-conductor-59b9f67954-xrjtn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6c0c4721cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2534 identity=55723 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-api-6678f67cf7-sd9g2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c0c4721cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2534 identity=55723 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-api-6678f67cf7-sd9g2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3faa12ce53 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1415 identity=24758 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/staffeln-db-init-bs8zx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3faa12ce53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1415 identity=24758 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/staffeln-db-init-bs8zx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3faa12ce53 endpointID=1415 k8sNamespace=openstack k8sPodName=staffeln-db-init-bs8zx subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=3f503955-5a72-42cf-816b-5308ae865c04 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=3f503955-5a72-42cf-816b-5308ae865c04 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=3faa12ce53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1415 identity=24758 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/staffeln-db-init-bs8zx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 16fb9261-b9b2-4e88-a88e-378d8e444aa5 default }" containerID=56c0671e110d4a63e445007668f3d09b103f2fd9c1e0aa960f6ea3fdd18b03b8 datapathConfiguration="&{false false false false false }" interface=lxcb22f3bcc2bfc k8sPodName=openstack/staffeln-db-sync-jggkw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56c0671e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2255 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-sync-jggkw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56c0671e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2255 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=147e4a02-97cd-4498-ba7c-a15b03a2b931,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=147e4a02-97cd-4498-ba7c-a15b03a2b931,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-sync-jggkw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=56c0671e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2255 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-sync-jggkw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=147e4a02-97cd-4498-ba7c-a15b03a2b931;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=147e4a02-97cd-4498-ba7c-a15b03a2b931;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56c0671e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2255 identity=7825 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=147e4a02-97cd-4498-ba7c-a15b03a2b931,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=147e4a02-97cd-4498-ba7c-a15b03a2b931,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-sync-jggkw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56c0671e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2255 identity=7825 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-sync-jggkw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=56c0671e11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2255 identity=7825 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-sync-jggkw subsys=endpoint level=info msg="Successful endpoint creation" containerID=56c0671e11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2255 identity=7825 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/staffeln-db-sync-jggkw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager