level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="831.089µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="44.681µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="815.59µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.07µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=93.109509ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.28µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="15.08µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="73.082µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="69.231µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="91.852µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="441.85µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.72µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=8.541184ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.360949ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="41.021µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="40.661µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="232.936µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="109.523µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="69.912µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=41.939154ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="70.632µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="7.26µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.16µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.49.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=102.980704ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.46µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.7145ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.841µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.902105ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.05µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration=870ns function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.09µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration=770ns function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="17.8µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="13.68µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="61.651µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="311.227µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.32µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.96µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="247.146µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="871.101µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.29808ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.77µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="29.881µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.49 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.49 ipAddr.ipv6="" k8sNodeIP=162.253.55.49 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.49" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.206" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.49" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.49} {CiliumInternalIP 10.0.0.206}] 10.0.0.0/24 [] [] 10.0.0.144 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:42569" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.454258582s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="19.39µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Start hook executed" duration="44.991µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="40.991µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="9.33µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3579 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3579 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3579 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.409095253s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=303.337649ms file-path=/var/run/cilium/state/templates/1d8d77f18af1293911c12d1864fcb89550c10e3e95aa97145894d07a13476a47/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3579 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 ipv4=10.0.0.144 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 identityLabels="reserved:health" ipv4=10.0.0.144 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 identity=4 identityLabels="reserved:health" ipv4=10.0.0.144 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.053190829s file-path=/var/run/cilium/state/templates/d50f7c2c606c2b0bb0d84225a4c5640868e8f22edafd8f123d67ce4d8a9607a8/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1422 identity=4 ipv4=10.0.0.144 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 925d860f-8b94-4162-b464-ef5d13273159 default }" containerID=c409de93a2e78fd02a2f85347fdd012419e23c96f1a1a7dc72e3e165f500e454 datapathConfiguration="&{false false false false false }" interface=lxc25aad4af76ec k8sPodName=kube-system/coredns-7c96b6546b-cjdcz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c409de93a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 ipv4=10.0.0.162 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cjdcz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c409de93a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.162 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cjdcz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c409de93a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.162 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cjdcz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c409de93a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 identity=1482 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.162 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cjdcz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c409de93a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 identity=1482 ipv4=10.0.0.162 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cjdcz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c409de93a2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=145 identity=1482 ipv4=10.0.0.162 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cjdcz subsys=endpoint level=info msg="Successful endpoint creation" containerID=c409de93a2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=145 identity=1482 ipv4=10.0.0.162 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cjdcz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.69 9784d57f-0d3f-41e2-9dfe-eab0df3953fa default }" containerID=18f3dfef1fdd5240ef48ebb724bec89e798253d182576ce5ad86397ca682b188 datapathConfiguration="&{false false false false false }" interface=lxc8c1f2eed6046 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rqwzq labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.246 83acf8ae-847a-4184-bae3-5fdf28012679 default }" containerID=2d61114772e5d2a8232d952e3aabf692708dad6eff76a1972ee58e819ce5c452 datapathConfiguration="&{false false false false false }" interface=lxc0bdd6f9cfc25 k8sPodName=kube-system/coredns-67659f764b-n97xd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d61114772 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-67659f764b-n97xd subsys=endpoint level=info msg="New endpoint" containerID=18f3dfef1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2696 ipv4=10.0.0.69 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rqwzq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d61114772 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-67659f764b-n97xd subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2d61114772 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=1482 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-67659f764b-n97xd oldIdentity="no identity" subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18f3dfef1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2696 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.69 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rqwzq subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d61114772 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=1482 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-67659f764b-n97xd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.60 cbba7bdf-1680-4691-bf88-12f46732d7fb default }" containerID=a22441c4151a49f134d099529e1efcede5ac034f00d0b052985cc1da5ae957ca datapathConfiguration="&{false false false false false }" interface=lxc5392a96a4cfb k8sPodName=cert-manager/cert-manager-startupapicheck-4vkj2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a22441c415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4vkj2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a22441c415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=b4440b7d-fe82-4bb3-9c66-a1e7ae49ff85,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=b4440b7d-fe82-4bb3-9c66-a1e7ae49ff85,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4vkj2 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18f3dfef1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2696 identity=33436 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.69 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rqwzq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18f3dfef1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2696 identity=33436 ipv4=10.0.0.69 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rqwzq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=b4440b7d-fe82-4bb3-9c66-a1e7ae49ff85;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=b4440b7d-fe82-4bb3-9c66-a1e7ae49ff85;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a22441c415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 identity=720 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=b4440b7d-fe82-4bb3-9c66-a1e7ae49ff85,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=b4440b7d-fe82-4bb3-9c66-a1e7ae49ff85,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4vkj2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a22441c415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 identity=720 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4vkj2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a22441c415 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2023 identity=720 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4vkj2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a22441c415 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2023 identity=720 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4vkj2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.106 532ea0df-2ab0-42e7-9a61-b9b36962eacf default }" containerID=d61fe5803dbc15bb304f6b2151d8debb789deba0953b5d1060564918c892b449 datapathConfiguration="&{false false false false false }" interface=lxc79f95b9f50ee k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvwr6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d61fe5803d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2398 ipv4=10.0.0.106 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvwr6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d61fe5803d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2398 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.106 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvwr6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d61fe5803d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2398 identity=5461 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.106 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvwr6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d61fe5803d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2398 identity=5461 ipv4=10.0.0.106 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvwr6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18f3dfef1f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2696 identity=33436 ipv4=10.0.0.69 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rqwzq subsys=endpoint level=info msg="Successful endpoint creation" containerID=18f3dfef1f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2696 identity=33436 ipv4=10.0.0.69 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rqwzq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2d61114772 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1535 identity=1482 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-67659f764b-n97xd subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d61114772 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1535 identity=1482 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-67659f764b-n97xd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.239 87d0309a-1211-4245-8560-42e2ce81d915 default }" containerID=84fa62b71f1264e7a629bc39e8848e41c308a36f685d93bcb881825d3c779927 datapathConfiguration="&{false false false false false }" interface=lxcded35313c9ee k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wphbs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84fa62b71f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2959 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wphbs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84fa62b71f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2959 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wphbs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.71 7e3628cd-e1c1-4272-95e2-6e08ca8b380e default }" containerID=8b0d89d47c3659540e57dcf06699f8943114c9ef870512a2a7d11671bb969503 datapathConfiguration="&{false false false false false }" interface=lxc06936e4f9265 k8sPodName=kube-system/coredns-67659f764b-q2rjn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b0d89d47c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 ipv4=10.0.0.71 ipv6= k8sPodName=kube-system/coredns-67659f764b-q2rjn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b0d89d47c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.71 ipv6= k8sPodName=kube-system/coredns-67659f764b-q2rjn subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8b0d89d47c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identity=1482 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.71 ipv6= k8sPodName=kube-system/coredns-67659f764b-q2rjn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b0d89d47c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identity=1482 ipv4=10.0.0.71 ipv6= k8sPodName=kube-system/coredns-67659f764b-q2rjn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d61fe5803d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2398 identity=5461 ipv4=10.0.0.106 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvwr6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d61fe5803d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2398 identity=5461 ipv4=10.0.0.106 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvwr6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8b0d89d47c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=420 identity=1482 ipv4=10.0.0.71 ipv6= k8sPodName=kube-system/coredns-67659f764b-q2rjn subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b0d89d47c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=420 identity=1482 ipv4=10.0.0.71 ipv6= k8sPodName=kube-system/coredns-67659f764b-q2rjn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.248 272d4ed1-3a15-423c-935c-437c7d4ac1ec default }" containerID=478c9add7673018712bfce5d8f2ad5d6b6b4970314fca8df8a647b63590d4b0a datapathConfiguration="&{false false false false false }" interface=lxc4156d5649554 k8sPodName=cert-manager/cert-manager-75c4c745bc-57k7q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=478c9add76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-57k7q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=478c9add76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-57k7q subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=84fa62b71f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2959 identity=57556 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wphbs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84fa62b71f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2959 identity=57556 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wphbs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=84fa62b71f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2959 identity=57556 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wphbs subsys=endpoint level=info msg="Successful endpoint creation" containerID=84fa62b71f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2959 identity=57556 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wphbs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=478c9add76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-57k7q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=478c9add76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identity=4988 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-57k7q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=478c9add76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identity=4988 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-57k7q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=478c9add76 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=329 identity=4988 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-57k7q subsys=endpoint level=info msg="Successful endpoint creation" containerID=478c9add76 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=329 identity=4988 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-57k7q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c409de93a2 endpointID=145 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-cjdcz subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=c409de93a2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=145 identity=1482 ipv4=10.0.0.162 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cjdcz subsys=endpoint level=info msg="Delete endpoint request" containerID=a22441c415 endpointID=2023 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-4vkj2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=b4440b7d-fe82-4bb3-9c66-a1e7ae49ff85 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=b4440b7d-fe82-4bb3-9c66-a1e7ae49ff85 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=a22441c415 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2023 identity=720 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4vkj2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 b4320d13-9d7f-47eb-b65d-bc11cfe26025 default }" containerID=e800257a7520b365cd185cb3e20f88c26a61d331dbd7af1302ae023300856e77 datapathConfiguration="&{false false false false false }" interface=lxcc8bd65a22ff5 k8sPodName=ingress-nginx/ingress-nginx-admission-create-hcmbq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e800257a75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2729 ipv4=10.0.0.54 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hcmbq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e800257a75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2729 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f45b6cdb-cc93-4f6e-80a0-091fcb69d403,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=f45b6cdb-cc93-4f6e-80a0-091fcb69d403,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.54 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hcmbq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=f45b6cdb-cc93-4f6e-80a0-091fcb69d403;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=f45b6cdb-cc93-4f6e-80a0-091fcb69d403;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e800257a75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2729 identity=4703 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f45b6cdb-cc93-4f6e-80a0-091fcb69d403,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=f45b6cdb-cc93-4f6e-80a0-091fcb69d403,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.54 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hcmbq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e800257a75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2729 identity=4703 ipv4=10.0.0.54 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hcmbq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e800257a75 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2729 identity=4703 ipv4=10.0.0.54 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hcmbq subsys=endpoint level=info msg="Successful endpoint creation" containerID=e800257a75 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2729 identity=4703 ipv4=10.0.0.54 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hcmbq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e800257a75 endpointID=2729 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-hcmbq subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=f45b6cdb-cc93-4f6e-80a0-091fcb69d403 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=f45b6cdb-cc93-4f6e-80a0-091fcb69d403 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=e800257a75 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2729 identity=4703 ipv4=10.0.0.54 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hcmbq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 3f816ab6-01d3-4464-a802-33804b4c5b7b default }" containerID=bce4800295250b13e57373b2faee426af5e6be4caec54c851d4031bad196faaf datapathConfiguration="&{false false false false false }" interface=lxc24b1a2ee5f59 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5vhd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bce4800295 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5vhd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bce4800295 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5vhd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bce4800295 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5vhd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bce4800295 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 identity=18920 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5vhd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bce4800295 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 identity=18920 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5vhd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bce4800295 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2567 identity=18920 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5vhd subsys=endpoint level=info msg="Successful endpoint creation" containerID=bce4800295 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2567 identity=18920 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5vhd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.133 5b012220-8f32-444f-a6c5-ca16afb67266 default }" containerID=636980fedf346ddf8b88ae071d434ea2ff63af0b8358cb6e8095450c1d98ab35 datapathConfiguration="&{false false false false false }" interface=lxcc42a07d7f477 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pl2hk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=636980fedf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2317 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pl2hk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=636980fedf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2317 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a2de39b0-45a9-4f77-a692-19c76676f6b0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=a2de39b0-45a9-4f77-a692-19c76676f6b0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pl2hk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=a2de39b0-45a9-4f77-a692-19c76676f6b0;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=a2de39b0-45a9-4f77-a692-19c76676f6b0;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=636980fedf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2317 identity=9365 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a2de39b0-45a9-4f77-a692-19c76676f6b0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=a2de39b0-45a9-4f77-a692-19c76676f6b0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pl2hk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=636980fedf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2317 identity=9365 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pl2hk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=636980fedf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2317 identity=9365 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pl2hk subsys=endpoint level=info msg="Successful endpoint creation" containerID=636980fedf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2317 identity=9365 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pl2hk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=636980fedf endpointID=2317 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-pl2hk subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=a2de39b0-45a9-4f77-a692-19c76676f6b0 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=a2de39b0-45a9-4f77-a692-19c76676f6b0 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=636980fedf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2317 identity=9365 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pl2hk subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=fe0ebf1d-2d4b-4a21-9992-dbcaf8e54d71] Description:}]" policyAddRequest=d18da146-2754-4d56-8048-7a132539bab0 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d18da146-2754-4d56-8048-7a132539bab0 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=bb2ce27b-c460-41c3-b6d4-58a73911a4e9] Description:}]" policyAddRequest=620a1688-9690-4f47-80f5-1236903cf1fa subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=620a1688-9690-4f47-80f5-1236903cf1fa policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.29 93666b59-5e3d-487f-aef4-6d0a7ab8f2cf default }" containerID=86a9e8fc5b666a8a6d192c9fb2f493308c4717431898cbcbfd37006d51f74419 datapathConfiguration="&{false false false false false }" interface=lxc207744821cac k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qsptr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86a9e8fc5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qsptr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86a9e8fc5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qsptr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=86a9e8fc5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qsptr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86a9e8fc5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=55844 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qsptr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86a9e8fc5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=55844 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qsptr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 035438d8-fa60-4103-80c6-3dabfb05d6a8 default }" containerID=7253b07f8c1e4a0a516e71e6940e10fdb68b74d1651cae0a10345b625358593d datapathConfiguration="&{false false false false false }" interface=lxcbd2ed3828381 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rjs5j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7253b07f8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rjs5j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7253b07f8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rjs5j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7253b07f8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identity=26204 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rjs5j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7253b07f8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identity=26204 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rjs5j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=86a9e8fc5b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=34 identity=55844 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qsptr subsys=endpoint level=info msg="Successful endpoint creation" containerID=86a9e8fc5b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=34 identity=55844 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-qsptr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7253b07f8c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2443 identity=26204 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rjs5j subsys=endpoint level=info msg="Successful endpoint creation" containerID=7253b07f8c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2443 identity=26204 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rjs5j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.36 c3019d73-0590-4245-b80b-1466e2bc2ad6 default }" containerID=72d2674ed2ca63cc2dd4b7cec1936af4cc687c221eb2c1e78446f32428b11360 datapathConfiguration="&{false false false false false }" interface=lxc2e3bed3d9c81 k8sPodName=openstack/pxc-operator-69cb5bbdb9-h2tbf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72d2674ed2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h2tbf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72d2674ed2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h2tbf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72d2674ed2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identity=20191 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h2tbf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=72d2674ed2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identity=20191 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h2tbf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72d2674ed2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=166 identity=20191 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h2tbf subsys=endpoint level=info msg="Successful endpoint creation" containerID=72d2674ed2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=166 identity=20191 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-h2tbf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.199 56299af5-f09c-4e63-a359-f15c2c1ba90e default }" containerID=6bedbc7253d59c2192654b1fdd367b18877793f3e1b548a1075d4826ca08828d datapathConfiguration="&{false false false false false }" interface=lxccdc463cf3001 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bedbc7253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2705 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bedbc7253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2705 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6bedbc7253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2705 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.199 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bedbc7253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2705 identity=13231 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bedbc7253 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2705 identity=13231 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6bedbc7253 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2705 identity=13231 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bedbc7253 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2705 identity=13231 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.1 13b33c1d-3485-4561-964e-3ec8acbbe50d default }" containerID=fb6b0032aea5e78479154044346171d15f0b0e23c817b993648046ab84836481 datapathConfiguration="&{false false false false false }" interface=lxcb5ea4e59058c k8sPodName=local-path-storage/helper-pod-create-pvc-e7ed1d18-c250-4a8f-b740-0067d9d51063 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb6b0032ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ed1d18-c250-4a8f-b740-0067d9d51063 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb6b0032ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ed1d18-c250-4a8f-b740-0067d9d51063 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb6b0032ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identity=34603 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ed1d18-c250-4a8f-b740-0067d9d51063 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb6b0032ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identity=34603 ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ed1d18-c250-4a8f-b740-0067d9d51063 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb6b0032ae datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1604 identity=34603 ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ed1d18-c250-4a8f-b740-0067d9d51063 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb6b0032ae datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1604 identity=34603 ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ed1d18-c250-4a8f-b740-0067d9d51063 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fb6b0032ae endpointID=1604 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e7ed1d18-c250-4a8f-b740-0067d9d51063 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fb6b0032ae datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1604 identity=34603 ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ed1d18-c250-4a8f-b740-0067d9d51063 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 a1a8a6bf-c57c-4b55-9801-18e1e559353c default }" containerID=edcd27fa941ee64394f5fc7405de53e7cb7af745d15309248d2fb242c1588d48 datapathConfiguration="&{false false false false false }" interface=lxcbe3b8fe213b7 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edcd27fa94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=edcd27fa94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=edcd27fa94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identity=52295 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=edcd27fa94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identity=52295 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=edcd27fa94 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=671 identity=52295 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=edcd27fa94 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=671 identity=52295 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=746e2826-7cb4-47b5-b799-d0101f6c2402] Description:}]" policyAddRequest=e7fb519c-8c6c-46a7-afb9-a088f4fb03f6 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=e7fb519c-8c6c-46a7-afb9-a088f4fb03f6 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.245 0271ce66-727e-4ff6-b156-57a0603ae6ca default }" containerID=cfb4a4d8d62f1d0fff4799596752dd92b0a5d0f591d709671d2ab405552252ba datapathConfiguration="&{false false false false false }" interface=lxc20d48eaff6a5 k8sPodName=local-path-storage/helper-pod-create-pvc-a89a1c8f-365d-43d2-8b5f-9a8a19fb350c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cfb4a4d8d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1187 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a89a1c8f-365d-43d2-8b5f-9a8a19fb350c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cfb4a4d8d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1187 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a89a1c8f-365d-43d2-8b5f-9a8a19fb350c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cfb4a4d8d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1187 identity=34603 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a89a1c8f-365d-43d2-8b5f-9a8a19fb350c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cfb4a4d8d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1187 identity=34603 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a89a1c8f-365d-43d2-8b5f-9a8a19fb350c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cfb4a4d8d6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1187 identity=34603 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a89a1c8f-365d-43d2-8b5f-9a8a19fb350c subsys=endpoint level=info msg="Successful endpoint creation" containerID=cfb4a4d8d6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1187 identity=34603 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a89a1c8f-365d-43d2-8b5f-9a8a19fb350c subsys=daemon level=info msg="Delete endpoint request" containerID=cfb4a4d8d6 endpointID=1187 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a89a1c8f-365d-43d2-8b5f-9a8a19fb350c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cfb4a4d8d6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1187 identity=34603 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a89a1c8f-365d-43d2-8b5f-9a8a19fb350c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 e2ebf66d-6c52-4638-a128-cb93ca02e958 default }" containerID=de8bc4928ff25b6025da6aad8b73c54e7598ba42c7225d7164cf52e449046b42 datapathConfiguration="&{false false false false false }" interface=lxccbda50944b81 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de8bc4928f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de8bc4928f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=de8bc4928f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.197 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de8bc4928f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 identity=7205 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de8bc4928f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 identity=7205 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de8bc4928f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=687 identity=7205 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=de8bc4928f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=687 identity=7205 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=80f54870-3b49-47bc-b50f-af01a1e18e5a] Description:}]" policyAddRequest=f6879796-8fb0-4315-805c-662baf15f485 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f6879796-8fb0-4315-805c-662baf15f485 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.151 70f69130-121b-4bb1-8fa1-3ba7ac92448e default }" containerID=f3679117442c85478dc7ab3681d4523d0231ae213a6f90481fe2f0a4d4787a5b datapathConfiguration="&{false false false false false }" interface=lxc70cbbbab6e79 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f367911744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 ipv4=10.0.0.151 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f367911744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.151 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f367911744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identity=804 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.151 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f367911744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identity=804 ipv4=10.0.0.151 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f367911744 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=391 identity=804 ipv4=10.0.0.151 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f367911744 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=391 identity=804 ipv4=10.0.0.151 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.01085192149011863 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.129 e94fdf7c-1f48-4621-92fb-709def7b63bc default }" containerID=4471a4007458e85ad989cafdfcf5eaf27ceec1e78ee01d28f33f64bc735a42d5 datapathConfiguration="&{false false false false false }" interface=lxc5627343dd4e7 k8sPodName=monitoring/node-feature-discovery-worker-vsckw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4471a40074 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3148 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vsckw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4471a40074 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3148 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vsckw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.204 5ae1ee3d-e4df-48be-baef-8b1fb45820df default }" containerID=68145d9826a1d90056fed52f1caa1a2c15b398a2010f8ca513866eb186f36ec9 datapathConfiguration="&{false false false false false }" interface=lxc42bb938cc3c3 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jr7qm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68145d9826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3118 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jr7qm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 eed46dba-abbe-4125-b7df-921c1b269638 default }" containerID=e99f0db329e776150ffac0b72b5c8f786d1ebe0efe33442d4f8089e3ebcbfc02 datapathConfiguration="&{false false false false false }" interface=lxc09228769e9d0 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c6lfx labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=68145d9826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3118 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jr7qm subsys=endpoint level=info msg="New endpoint" containerID=e99f0db329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c6lfx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e99f0db329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c6lfx subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4471a40074 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3148 identity=62493 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vsckw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4471a40074 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3148 identity=62493 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vsckw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e99f0db329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c6lfx line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=68145d9826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3118 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jr7qm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68145d9826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3118 identity=3341 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jr7qm oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=68145d9826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3118 identity=3341 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jr7qm subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e99f0db329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 identity=25086 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c6lfx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e99f0db329 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1298 identity=25086 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c6lfx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4471a40074 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3148 identity=62493 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vsckw subsys=endpoint level=info msg="Successful endpoint creation" containerID=4471a40074 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3148 identity=62493 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vsckw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=68145d9826 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3118 identity=3341 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jr7qm subsys=endpoint level=info msg="Successful endpoint creation" containerID=68145d9826 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3118 identity=3341 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jr7qm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e99f0db329 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1298 identity=25086 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c6lfx subsys=endpoint level=info msg="Successful endpoint creation" containerID=e99f0db329 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1298 identity=25086 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-c6lfx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.140 1b327fbb-2725-4f71-8276-fd846bebf671 default }" containerID=93cf444b1cc2d3539c56a8d01d1fb4c8bddaa42ff630810e3713b1e9458ea502 datapathConfiguration="&{false false false false false }" interface=lxcf24e0680bb40 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zg6p4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93cf444b1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3867 ipv4=10.0.0.140 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zg6p4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93cf444b1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3867 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.140 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zg6p4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=93cf444b1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3867 identity=1692 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.140 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zg6p4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93cf444b1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3867 identity=1692 ipv4=10.0.0.140 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zg6p4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=93cf444b1c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3867 identity=1692 ipv4=10.0.0.140 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zg6p4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=93cf444b1c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3867 identity=1692 ipv4=10.0.0.140 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zg6p4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3579 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-171-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03579 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03579 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03579 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03579:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3579 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 98ad7056-f2ac-43d4-bb73-85517bae6827 default }" containerID=db415bcc29cf2c2eadd84c7d237755ebd18f6630e81b5ffa89e51d8dd581da9a datapathConfiguration="&{false false false false false }" interface=lxcd5587e7e6ef0 k8sPodName=monitoring/kube-prometheus-stack-admission-create-kjjjq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db415bcc29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3943 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kjjjq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db415bcc29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3943 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=e9008034-e7a8-4c63-a7e9-74dcb37d837c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e9008034-e7a8-4c63-a7e9-74dcb37d837c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kjjjq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=e9008034-e7a8-4c63-a7e9-74dcb37d837c;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=e9008034-e7a8-4c63-a7e9-74dcb37d837c;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db415bcc29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3943 identity=4217 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=e9008034-e7a8-4c63-a7e9-74dcb37d837c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e9008034-e7a8-4c63-a7e9-74dcb37d837c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kjjjq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=db415bcc29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3943 identity=4217 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kjjjq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db415bcc29 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3943 identity=4217 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kjjjq subsys=endpoint level=info msg="Successful endpoint creation" containerID=db415bcc29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3943 identity=4217 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kjjjq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=db415bcc29 endpointID=3943 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-kjjjq subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=e9008034-e7a8-4c63-a7e9-74dcb37d837c k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=e9008034-e7a8-4c63-a7e9-74dcb37d837c k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=db415bcc29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3943 identity=4217 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kjjjq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 89eb9def-77f5-4110-8945-284f18cc8e01 default }" containerID=06ab4f5f38ce79edb42209d6d058b2f0a0b63e0f7cd1e2bc6884a2adeb45611a datapathConfiguration="&{false false false false false }" interface=lxc0f29aabe399b k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qdd2b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06ab4f5f38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qdd2b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06ab4f5f38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qdd2b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=06ab4f5f38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qdd2b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06ab4f5f38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=26499 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qdd2b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06ab4f5f38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=26499 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qdd2b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 f0ed301a-29bd-4794-be88-dffb05d88409 default }" containerID=c1d0b47a154b0159072d832411ef777eec0ea6a8c648d301a0ec7c8483e8736a datapathConfiguration="&{false false false false false }" interface=lxc3d49cec8e88a k8sPodName=monitoring/kube-prometheus-stack-grafana-697797cc77-fq4x8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1d0b47a15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3471 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-697797cc77-fq4x8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1d0b47a15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3471 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-697797cc77-fq4x8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1d0b47a15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3471 identity=32768 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-697797cc77-fq4x8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1d0b47a15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3471 identity=32768 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-697797cc77-fq4x8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 b1145a6e-56eb-42ee-9bcc-30cfd650539d default }" containerID=540f4fdc686164c41f0dfb11d79008e2c9be2984d602e064057a4e7fc0a984f4 datapathConfiguration="&{false false false false false }" interface=lxcfe088b798b54 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wgr5r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=540f4fdc68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wgr5r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=540f4fdc68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wgr5r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=540f4fdc68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 identity=17161 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wgr5r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=540f4fdc68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 identity=17161 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wgr5r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=06ab4f5f38 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=24 identity=26499 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qdd2b subsys=endpoint level=info msg="Successful endpoint creation" containerID=06ab4f5f38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=24 identity=26499 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qdd2b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c1d0b47a15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3471 identity=32768 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-697797cc77-fq4x8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1d0b47a15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3471 identity=32768 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-697797cc77-fq4x8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=540f4fdc68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=916 identity=17161 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wgr5r subsys=endpoint level=info msg="Successful endpoint creation" containerID=540f4fdc68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=916 identity=17161 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wgr5r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 ce483072-1ea7-4b9c-87b8-f3f1d0b16068 default }" containerID=cf30c0224616604a38bc25c180d5c75b2bbc15e5bfa1bce72ffa2cf9aa576264 datapathConfiguration="&{false false false false false }" interface=lxc0cf18cb8d2b5 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dt98z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf30c02246 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1260 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dt98z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf30c02246 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1260 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=9ce3c255-2b05-4e80-9adf-ea093c828567,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9ce3c255-2b05-4e80-9adf-ea093c828567,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dt98z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=9ce3c255-2b05-4e80-9adf-ea093c828567;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=9ce3c255-2b05-4e80-9adf-ea093c828567;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf30c02246 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1260 identity=8807 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=9ce3c255-2b05-4e80-9adf-ea093c828567,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9ce3c255-2b05-4e80-9adf-ea093c828567,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dt98z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf30c02246 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1260 identity=8807 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dt98z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf30c02246 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1260 identity=8807 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dt98z subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf30c02246 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1260 identity=8807 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dt98z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.90 502d2ddd-68a2-4a6f-a77a-ea16c42316c1 default }" containerID=0d6adabac83e1673f37acf9dd53ced140a6e7d4ddaff15eac2ea9f6936b9b132 datapathConfiguration="&{false false false false false }" interface=lxcb1c94d376c6b k8sPodName=local-path-storage/helper-pod-create-pvc-b2a98a25-f52d-4be7-9249-dff6a8e1e69d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d6adabac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1175 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2a98a25-f52d-4be7-9249-dff6a8e1e69d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d6adabac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1175 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2a98a25-f52d-4be7-9249-dff6a8e1e69d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d6adabac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1175 identity=34603 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2a98a25-f52d-4be7-9249-dff6a8e1e69d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d6adabac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1175 identity=34603 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2a98a25-f52d-4be7-9249-dff6a8e1e69d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d6adabac8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1175 identity=34603 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2a98a25-f52d-4be7-9249-dff6a8e1e69d subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d6adabac8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1175 identity=34603 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2a98a25-f52d-4be7-9249-dff6a8e1e69d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.47 a1b3d56c-5735-4c67-9a6c-46dc060624b6 default }" containerID=d75bf260f9e64a8bf21aab36555f8e1ca769ff3d33c5bfe58eaa44dbb0d33ee9 datapathConfiguration="&{false false false false false }" interface=lxc5357b94c6e21 k8sPodName=local-path-storage/helper-pod-create-pvc-95e48c43-0eab-47a4-babc-b5b70b60133c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d75bf260f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95e48c43-0eab-47a4-babc-b5b70b60133c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d75bf260f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95e48c43-0eab-47a4-babc-b5b70b60133c subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d75bf260f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 identity=34603 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95e48c43-0eab-47a4-babc-b5b70b60133c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d75bf260f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 identity=34603 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95e48c43-0eab-47a4-babc-b5b70b60133c subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d75bf260f9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=609 identity=34603 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95e48c43-0eab-47a4-babc-b5b70b60133c subsys=endpoint level=info msg="Successful endpoint creation" containerID=d75bf260f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=609 identity=34603 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95e48c43-0eab-47a4-babc-b5b70b60133c subsys=daemon level=info msg="Delete endpoint request" containerID=cf30c02246 endpointID=1260 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-dt98z subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=9ce3c255-2b05-4e80-9adf-ea093c828567 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=9ce3c255-2b05-4e80-9adf-ea093c828567 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=cf30c02246 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1260 identity=8807 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dt98z subsys=endpoint level=info msg="Delete endpoint request" containerID=0d6adabac8 endpointID=1175 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b2a98a25-f52d-4be7-9249-dff6a8e1e69d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0d6adabac8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1175 identity=34603 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2a98a25-f52d-4be7-9249-dff6a8e1e69d subsys=endpoint level=info msg="Delete endpoint request" containerID=d75bf260f9 endpointID=609 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-95e48c43-0eab-47a4-babc-b5b70b60133c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d75bf260f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=609 identity=34603 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95e48c43-0eab-47a4-babc-b5b70b60133c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 12ad96ce-8a5d-4c00-8d32-ab3d092b1ade default }" containerID=7136fcd1ad415425b3cdd106f42c47c15fa93199b885e560987f4fbb8bcdd42d datapathConfiguration="&{false false false false false }" interface=lxc96b211f2b6d9 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7136fcd1ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3904 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7136fcd1ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3904 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7136fcd1ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3904 identity=2126 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7136fcd1ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3904 identity=2126 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7136fcd1ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3904 identity=2126 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7136fcd1ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3904 identity=2126 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.177 97a5dd9e-8859-4639-a716-054c17595db7 default }" containerID=b0b404e834199c352c133746c798c455394ceaf2c4408259f2411af96a23e14b datapathConfiguration="&{false false false false false }" interface=lxcc7d51797e5b6 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0b404e834 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0b404e834 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0b404e834 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 identity=18073 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0b404e834 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 identity=18073 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0b404e834 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2198 identity=18073 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0b404e834 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2198 identity=18073 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.124 aa2401ae-67c8-4bfe-aa6b-d5f6b99f01b9 default }" containerID=076202a5c9633f01f0888af40e4fb5223bcff4a152b543921d16d0d40783ab7d datapathConfiguration="&{false false false false false }" interface=lxc895af5a54500 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=076202a5c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3787 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 3e67ee13-bfbb-42d7-8c86-425e7f5b6986 default }" containerID=e6c14e3b3b01698afad825faacbced7b2c3dc8e81625b40a1703c52e27903492 datapathConfiguration="&{false false false false false }" interface=lxcbc9d14643a4e k8sPodName=monitoring/loki-gateway-cf54cb88c-hts87 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=076202a5c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3787 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="New endpoint" containerID=e6c14e3b3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3456 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hts87 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=e6c14e3b3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3456 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hts87 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=076202a5c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3787 identity=12680 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=076202a5c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3787 identity=12680 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6c14e3b3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3456 identity=15391 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hts87 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6c14e3b3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3456 identity=15391 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hts87 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 9b39f3e2-f031-4ce4-91ce-9e2169beed15 default }" containerID=9f0a5cd270d1c2e8954c2baa48abd3a28daf549bcef9f7cbe2312db8afa89eab datapathConfiguration="&{false false false false false }" interface=lxcfd1dd0ef2226 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f0a5cd270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f0a5cd270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f0a5cd270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identity=29078 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f0a5cd270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identity=29078 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=076202a5c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3787 identity=12680 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=076202a5c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3787 identity=12680 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e6c14e3b3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3456 identity=15391 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hts87 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6c14e3b3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3456 identity=15391 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hts87 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.138 4c516b72-1ae5-44a4-972b-a241b3b6371d default }" containerID=ccee66b3795dfd3d5e36e16fd298b745dc63f572a5b484b9021ef834e07e13f9 datapathConfiguration="&{false false false false false }" interface=lxc2df822ea4f2d k8sPodName=local-path-storage/helper-pod-create-pvc-2b9dca70-09fc-4286-996c-b576bd71a191 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccee66b379 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=754 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b9dca70-09fc-4286-996c-b576bd71a191 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccee66b379 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=754 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b9dca70-09fc-4286-996c-b576bd71a191 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccee66b379 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=754 identity=34603 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b9dca70-09fc-4286-996c-b576bd71a191 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ccee66b379 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=754 identity=34603 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b9dca70-09fc-4286-996c-b576bd71a191 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f0a5cd270 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1518 identity=29078 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f0a5cd270 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1518 identity=29078 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ccee66b379 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=754 identity=34603 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b9dca70-09fc-4286-996c-b576bd71a191 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccee66b379 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=754 identity=34603 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b9dca70-09fc-4286-996c-b576bd71a191 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.253 aae54382-12c4-445f-bb79-51d0a8cc81bf default }" containerID=9d004947d78379d811cd79d3781c7500b059b5d9de7221c6d96cd04b4707fbec datapathConfiguration="&{false false false false false }" interface=lxc8efec0740c96 k8sPodName=monitoring/vector-6wb66 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d004947d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/vector-6wb66 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d004947d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/vector-6wb66 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d004947d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identity=17167 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/vector-6wb66 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d004947d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=192 identity=17167 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/vector-6wb66 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d004947d7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=192 identity=17167 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/vector-6wb66 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d004947d7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=192 identity=17167 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/vector-6wb66 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ccee66b379 endpointID=754 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2b9dca70-09fc-4286-996c-b576bd71a191 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ccee66b379 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=754 identity=34603 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b9dca70-09fc-4286-996c-b576bd71a191 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 11d48dda-d441-4f44-9969-55514283c52b default }" containerID=ab4e9ebc755da5c75ef4b7d318b78a0a02f8b16f945dae4f02fc44f3543967e1 datapathConfiguration="&{false false false false false }" interface=lxca4a0b863d405 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab4e9ebc75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab4e9ebc75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab4e9ebc75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identity=17034 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab4e9ebc75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identity=17034 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ab4e9ebc75 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=326 identity=17034 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab4e9ebc75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=326 identity=17034 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.155 c3c69886-3d06-4c27-911c-286fa4b89da7 default }" containerID=a3af53f9ebe21c788e4a44e7817711173826812ffec9fa9f5875a85825c163de datapathConfiguration="&{false false false false false }" interface=lxc0bede807a417 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-796kg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3af53f9eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-796kg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3af53f9eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-796kg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a3af53f9eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=5103 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-796kg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3af53f9eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=5103 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-796kg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a3af53f9eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=212 identity=5103 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-796kg subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3af53f9eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=212 identity=5103 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-796kg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.85 968e0a4c-397d-4b48-9a61-3dd15e7a42ce default }" containerID=c4367483aa1907a91588b6319ca6a8e99ea11a9160073ff5850258dc20e8166f datapathConfiguration="&{false false false false false }" interface=lxc0edcef7fe196 k8sPodName=openstack/memcached-memcached-6479589586-pf6m4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4367483aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1988 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pf6m4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4367483aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1988 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pf6m4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4367483aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1988 identity=62735 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pf6m4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4367483aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1988 identity=62735 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pf6m4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c4367483aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1988 identity=62735 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pf6m4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4367483aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1988 identity=62735 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pf6m4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.147 43786081-12a6-485b-9355-abcfec21fe5f default }" containerID=c26bb3b3eb90900341f2e51c39de8621f57c03b7fbaae6ab876cd25327f8dae7 datapathConfiguration="&{false false false false false }" interface=lxca5d170ca5d7b k8sPodName=local-path-storage/helper-pod-create-pvc-8a794954-9969-412f-a9f2-16139a70d823 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c26bb3b3eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8a794954-9969-412f-a9f2-16139a70d823 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c26bb3b3eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8a794954-9969-412f-a9f2-16139a70d823 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c26bb3b3eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=34603 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8a794954-9969-412f-a9f2-16139a70d823 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c26bb3b3eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=34603 ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8a794954-9969-412f-a9f2-16139a70d823 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c26bb3b3eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=59 identity=34603 ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8a794954-9969-412f-a9f2-16139a70d823 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c26bb3b3eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=59 identity=34603 ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8a794954-9969-412f-a9f2-16139a70d823 subsys=daemon level=info msg="Delete endpoint request" containerID=c26bb3b3eb endpointID=59 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8a794954-9969-412f-a9f2-16139a70d823 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c26bb3b3eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=59 identity=34603 ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8a794954-9969-412f-a9f2-16139a70d823 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 0cb1be36-c414-4961-89e1-330b77855d19 default }" containerID=14e99c2d2b88f316bd87972f04bc5fed40511b84422fdad7acffecaaaaec392c datapathConfiguration="&{false false false false false }" interface=lxc8e37b2673c94 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14e99c2d2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1863 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14e99c2d2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1863 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14e99c2d2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1863 identity=15737 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=14e99c2d2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1863 identity=15737 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14e99c2d2b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1863 identity=15737 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=14e99c2d2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1863 identity=15737 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.17 dc980943-28cd-441e-a199-66595ea16b9b default }" containerID=c17f5fc7dd00e54d773e80520104d60837d9975b57fa057fc041ef3364f1a692 datapathConfiguration="&{false false false false false }" interface=lxcc616063edc1c k8sPodName=openstack/keystone-api-7f6b47cd75-9l4nq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c17f5fc7dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-api-7f6b47cd75-9l4nq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c17f5fc7dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-api-7f6b47cd75-9l4nq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c17f5fc7dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identity=51102 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-api-7f6b47cd75-9l4nq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c17f5fc7dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identity=51102 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-api-7f6b47cd75-9l4nq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 1c26a92b-72c4-4a0b-a7e6-fe50c3438c5c default }" containerID=c154c352e6b31f9fc202825ab3d337bb3ddc6756473c66c72ee8cc2960e7f5cb datapathConfiguration="&{false false false false false }" interface=lxcf78ebe0f6461 k8sPodName=openstack/keystone-credential-setup-q2g5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c154c352e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-credential-setup-q2g5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c154c352e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0a9a92d9-9d56-434e-b61a-67918eab36c1,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=0a9a92d9-9d56-434e-b61a-67918eab36c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-credential-setup-q2g5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0a9a92d9-9d56-434e-b61a-67918eab36c1;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=0a9a92d9-9d56-434e-b61a-67918eab36c1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c154c352e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identity=15529 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0a9a92d9-9d56-434e-b61a-67918eab36c1,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=0a9a92d9-9d56-434e-b61a-67918eab36c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-credential-setup-q2g5t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c154c352e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identity=15529 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-credential-setup-q2g5t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c17f5fc7dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=280 identity=51102 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-api-7f6b47cd75-9l4nq subsys=endpoint level=info msg="Successful endpoint creation" containerID=c17f5fc7dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=280 identity=51102 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-api-7f6b47cd75-9l4nq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c154c352e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=252 identity=15529 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-credential-setup-q2g5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=c154c352e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=252 identity=15529 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-credential-setup-q2g5t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c154c352e6 endpointID=252 k8sNamespace=openstack k8sPodName=keystone-credential-setup-q2g5t subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0a9a92d9-9d56-434e-b61a-67918eab36c1 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=0a9a92d9-9d56-434e-b61a-67918eab36c1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c154c352e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=252 identity=15529 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-credential-setup-q2g5t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 f35c08de-a7f5-46a5-b445-893529d42fc2 default }" containerID=853d64076e9d942d918c5718c801757e4e55df945caef53b6d30847c92273539 datapathConfiguration="&{false false false false false }" interface=lxcbceae022acee k8sPodName=openstack/keystone-db-init-gb6k8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=853d64076e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-gb6k8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=853d64076e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9d9b91c1-1236-463d-a5f4-20efbb4adf4b,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=9d9b91c1-1236-463d-a5f4-20efbb4adf4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-gb6k8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=853d64076e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-gb6k8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9d9b91c1-1236-463d-a5f4-20efbb4adf4b;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=9d9b91c1-1236-463d-a5f4-20efbb4adf4b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=853d64076e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identity=38549 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9d9b91c1-1236-463d-a5f4-20efbb4adf4b,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=9d9b91c1-1236-463d-a5f4-20efbb4adf4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-gb6k8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=853d64076e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identity=38549 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-gb6k8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=853d64076e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2945 identity=38549 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-gb6k8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=853d64076e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2945 identity=38549 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-gb6k8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=853d64076e endpointID=2945 k8sNamespace=openstack k8sPodName=keystone-db-init-gb6k8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9d9b91c1-1236-463d-a5f4-20efbb4adf4b k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=9d9b91c1-1236-463d-a5f4-20efbb4adf4b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=853d64076e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2945 identity=38549 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-gb6k8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 dcbb84c2-fb72-4af2-8a08-f3e91bd6eb18 default }" containerID=af37416ba859f7b2252cd09f750006a5428119fb9010e48cc1ccd588abce6129 datapathConfiguration="&{false false false false false }" interface=lxc741c2df5093f k8sPodName=openstack/keystone-fernet-setup-rnjch labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af37416ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3062 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-fernet-setup-rnjch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af37416ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3062 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6d2a74c9-8edc-4e84-8955-283409faf6c7,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=6d2a74c9-8edc-4e84-8955-283409faf6c7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-fernet-setup-rnjch subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6d2a74c9-8edc-4e84-8955-283409faf6c7;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=6d2a74c9-8edc-4e84-8955-283409faf6c7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af37416ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3062 identity=6217 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6d2a74c9-8edc-4e84-8955-283409faf6c7,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=6d2a74c9-8edc-4e84-8955-283409faf6c7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-fernet-setup-rnjch oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af37416ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3062 identity=6217 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-fernet-setup-rnjch subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=af37416ba8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3062 identity=6217 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-fernet-setup-rnjch subsys=endpoint level=info msg="Successful endpoint creation" containerID=af37416ba8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3062 identity=6217 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-fernet-setup-rnjch subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=af37416ba8 endpointID=3062 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-rnjch subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6d2a74c9-8edc-4e84-8955-283409faf6c7 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=6d2a74c9-8edc-4e84-8955-283409faf6c7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=af37416ba8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3062 identity=6217 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-fernet-setup-rnjch subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 6d69b285-ddf1-4c05-80f3-79aedee9e41c default }" containerID=4484331dddd5871bd9113ef156a9d2940b35844b7d18499261f96bf9850bd9f8 datapathConfiguration="&{false false false false false }" interface=lxc2a6f1ff27d1d k8sPodName=openstack/keystone-db-sync-hj5xx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4484331ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-sync-hj5xx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4484331ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=12003934-b661-4a4e-b003-f86fedbe242b,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=12003934-b661-4a4e-b003-f86fedbe242b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-sync-hj5xx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=12003934-b661-4a4e-b003-f86fedbe242b;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=12003934-b661-4a4e-b003-f86fedbe242b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4484331ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=26960 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=12003934-b661-4a4e-b003-f86fedbe242b,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=12003934-b661-4a4e-b003-f86fedbe242b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-sync-hj5xx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4484331ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=26960 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-sync-hj5xx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4484331ddd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=639 identity=26960 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-sync-hj5xx subsys=endpoint level=info msg="Successful endpoint creation" containerID=4484331ddd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=639 identity=26960 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-sync-hj5xx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4484331ddd endpointID=639 k8sNamespace=openstack k8sPodName=keystone-db-sync-hj5xx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=12003934-b661-4a4e-b003-f86fedbe242b k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=12003934-b661-4a4e-b003-f86fedbe242b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4484331ddd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=639 identity=26960 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-sync-hj5xx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 b083f705-7b90-4a28-81cd-2ae916cfdcd4 default }" containerID=54087494eba7939a01346eab59b5c7dfd6dcf66d282b74d0479e3273ccd1896a datapathConfiguration="&{false false false false false }" interface=lxc59c4cf2b959a k8sPodName=openstack/keystone-rabbit-init-6cfqx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54087494eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2424 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-rabbit-init-6cfqx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54087494eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2424 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8c2e6776-def1-4a43-8795-59bfe5dfc321,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8c2e6776-def1-4a43-8795-59bfe5dfc321,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-rabbit-init-6cfqx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8c2e6776-def1-4a43-8795-59bfe5dfc321;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=8c2e6776-def1-4a43-8795-59bfe5dfc321;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=54087494eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2424 identity=20867 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8c2e6776-def1-4a43-8795-59bfe5dfc321,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8c2e6776-def1-4a43-8795-59bfe5dfc321,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-rabbit-init-6cfqx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54087494eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2424 identity=20867 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-rabbit-init-6cfqx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=54087494eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2424 identity=20867 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-rabbit-init-6cfqx subsys=endpoint level=info msg="Successful endpoint creation" containerID=54087494eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2424 identity=20867 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-rabbit-init-6cfqx subsys=daemon level=info msg="Delete endpoint request" containerID=54087494eb endpointID=2424 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-6cfqx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8c2e6776-def1-4a43-8795-59bfe5dfc321 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=8c2e6776-def1-4a43-8795-59bfe5dfc321 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=54087494eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2424 identity=20867 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-rabbit-init-6cfqx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 c93dc235-8b45-4ae0-be97-f831f9e85541 default }" containerID=7c72287d9acd21f9b4f7731ad44b27e2b7c12bbf4cab1f3905ee8e6f56652b8d datapathConfiguration="&{false false false false false }" interface=lxc03ca1a14f9d4 k8sPodName=openstack/keystone-domain-manage-ksmrv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c72287d9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3309 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-domain-manage-ksmrv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c72287d9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3309 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1cbe0953-e75a-4db4-9575-3d930491ed21,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=1cbe0953-e75a-4db4-9575-3d930491ed21,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-domain-manage-ksmrv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1cbe0953-e75a-4db4-9575-3d930491ed21;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=1cbe0953-e75a-4db4-9575-3d930491ed21;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c72287d9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3309 identity=49029 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1cbe0953-e75a-4db4-9575-3d930491ed21,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=1cbe0953-e75a-4db4-9575-3d930491ed21,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-domain-manage-ksmrv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c72287d9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3309 identity=49029 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-domain-manage-ksmrv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c72287d9a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3309 identity=49029 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-domain-manage-ksmrv subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c72287d9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3309 identity=49029 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-domain-manage-ksmrv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7c72287d9a endpointID=3309 k8sNamespace=openstack k8sPodName=keystone-domain-manage-ksmrv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1cbe0953-e75a-4db4-9575-3d930491ed21 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=1cbe0953-e75a-4db4-9575-3d930491ed21 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7c72287d9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3309 identity=49029 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-domain-manage-ksmrv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 e115fb81-b2a6-44c5-b563-0d7ffd933196 default }" containerID=7ed609f21e4da5b2acff47856b02c51e457fecbc37de3c21bd7bc0d330f726e5 datapathConfiguration="&{false false false false false }" interface=lxcf0781cecd10f k8sPodName=openstack/keystone-bootstrap-9llqj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ed609f21e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2158 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-bootstrap-9llqj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ed609f21e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2158 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7eef134e-05e8-48bc-9096-db01016b1a82,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=7eef134e-05e8-48bc-9096-db01016b1a82,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-bootstrap-9llqj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7eef134e-05e8-48bc-9096-db01016b1a82;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=7eef134e-05e8-48bc-9096-db01016b1a82;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ed609f21e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2158 identity=17348 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7eef134e-05e8-48bc-9096-db01016b1a82,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=7eef134e-05e8-48bc-9096-db01016b1a82,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-bootstrap-9llqj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ed609f21e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2158 identity=17348 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-bootstrap-9llqj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7ed609f21e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2158 identity=17348 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-bootstrap-9llqj subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ed609f21e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2158 identity=17348 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-bootstrap-9llqj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7ed609f21e endpointID=2158 k8sNamespace=openstack k8sPodName=keystone-bootstrap-9llqj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7eef134e-05e8-48bc-9096-db01016b1a82 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=7eef134e-05e8-48bc-9096-db01016b1a82 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7ed609f21e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2158 identity=17348 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-bootstrap-9llqj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 49af3a74-192b-400a-9dde-bd8ffa110f6a default }" containerID=8baac5b7824758dab4b3077ce461d11c863e35f69aa3e9d9a8f7eaf7c22a7b90 datapathConfiguration="&{false false false false false }" interface=lxcc17e4e8df381 k8sPodName=local-path-storage/helper-pod-create-pvc-0ba4c9af-c423-4848-8cb7-1cfc49f9eb0c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8baac5b782 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1303 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ba4c9af-c423-4848-8cb7-1cfc49f9eb0c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8baac5b782 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1303 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ba4c9af-c423-4848-8cb7-1cfc49f9eb0c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8baac5b782 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1303 identity=34603 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ba4c9af-c423-4848-8cb7-1cfc49f9eb0c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8baac5b782 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1303 identity=34603 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ba4c9af-c423-4848-8cb7-1cfc49f9eb0c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8baac5b782 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1303 identity=34603 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ba4c9af-c423-4848-8cb7-1cfc49f9eb0c subsys=endpoint level=info msg="Successful endpoint creation" containerID=8baac5b782 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1303 identity=34603 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ba4c9af-c423-4848-8cb7-1cfc49f9eb0c subsys=daemon level=info msg="Delete endpoint request" containerID=8baac5b782 endpointID=1303 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0ba4c9af-c423-4848-8cb7-1cfc49f9eb0c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8baac5b782 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1303 identity=34603 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ba4c9af-c423-4848-8cb7-1cfc49f9eb0c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 14dd2820-6cb0-405e-a150-8fa0beedb209 default }" containerID=a46681327e3ee9e3599876bc7cfedaeb5a5481f1e3ac0d9a1e095e599c87ecc0 datapathConfiguration="&{false false false false false }" interface=lxc3706d64ea900 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a46681327e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a46681327e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a46681327e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a46681327e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identity=24401 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a46681327e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identity=24401 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a46681327e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=903 identity=24401 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a46681327e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=903 identity=24401 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.127 1e18f0f7-4c93-4abe-b641-c58fdf3fec6c default }" containerID=3d5d120f67ecb02a4c11fbd19c3e3b30af1f912675148ec0eeab2cc569c3d95d datapathConfiguration="&{false false false false false }" interface=lxcad5ada701b7e k8sPodName=openstack/barbican-api-547bff5887-2cd9v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d5d120f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1721 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-api-547bff5887-2cd9v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d5d120f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1721 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-api-547bff5887-2cd9v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3d5d120f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1721 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-api-547bff5887-2cd9v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d5d120f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1721 identity=934 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-api-547bff5887-2cd9v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d5d120f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1721 identity=934 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-api-547bff5887-2cd9v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 b4e382fa-88b7-41fa-a95e-c4da32abc29a default }" containerID=299a1d08953d1a758ecb57e77023ab828285da7277c5bb96f5d86e85c0b2b6ab datapathConfiguration="&{false false false false false }" interface=lxcc8805fd3b64c k8sPodName=openstack/barbican-db-init-kzrdr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=299a1d0895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-init-kzrdr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=299a1d0895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ddb5f246-0249-4e00-8a8e-87479af6d220,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=ddb5f246-0249-4e00-8a8e-87479af6d220,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-init-kzrdr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ddb5f246-0249-4e00-8a8e-87479af6d220;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=ddb5f246-0249-4e00-8a8e-87479af6d220;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=299a1d0895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 identity=1169 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ddb5f246-0249-4e00-8a8e-87479af6d220,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=ddb5f246-0249-4e00-8a8e-87479af6d220,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-init-kzrdr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=299a1d0895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 identity=1169 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-init-kzrdr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d5d120f67 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1721 identity=934 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-api-547bff5887-2cd9v subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d5d120f67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1721 identity=934 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-api-547bff5887-2cd9v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=299a1d0895 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3345 identity=1169 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-init-kzrdr subsys=endpoint level=info msg="Successful endpoint creation" containerID=299a1d0895 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3345 identity=1169 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-init-kzrdr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=299a1d0895 endpointID=3345 k8sNamespace=openstack k8sPodName=barbican-db-init-kzrdr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ddb5f246-0249-4e00-8a8e-87479af6d220 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=ddb5f246-0249-4e00-8a8e-87479af6d220 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=299a1d0895 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3345 identity=1169 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-init-kzrdr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 61594890-61b8-4959-bb8c-56ae4e8b4f3f default }" containerID=f3d95250bb7ff42a25b0886f0ba30e83e662fb4af3b8c34fdb4406ab9d659b46 datapathConfiguration="&{false false false false false }" interface=lxce6b9d922f7c4 k8sPodName=openstack/barbican-db-sync-929w2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3d95250bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-db-sync-929w2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3d95250bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=51a77605-0d8b-4dbf-b45d-91b7f0a800f4,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=51a77605-0d8b-4dbf-b45d-91b7f0a800f4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-db-sync-929w2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=51a77605-0d8b-4dbf-b45d-91b7f0a800f4;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=51a77605-0d8b-4dbf-b45d-91b7f0a800f4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3d95250bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identity=57832 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=51a77605-0d8b-4dbf-b45d-91b7f0a800f4,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=51a77605-0d8b-4dbf-b45d-91b7f0a800f4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-db-sync-929w2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3d95250bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identity=57832 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-db-sync-929w2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f3d95250bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=354 identity=57832 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-db-sync-929w2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3d95250bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=354 identity=57832 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-db-sync-929w2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036360193163526185 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=f3d95250bb endpointID=354 k8sNamespace=openstack k8sPodName=barbican-db-sync-929w2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=51a77605-0d8b-4dbf-b45d-91b7f0a800f4 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=51a77605-0d8b-4dbf-b45d-91b7f0a800f4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f3d95250bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=354 identity=57832 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-db-sync-929w2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 19e30423-f19d-4bfa-b0fc-10613e539efd default }" containerID=1e9fddc7f327d78de38d726acec2fa8c7a70247898e5c1a7292e9ff8f01ed1d1 datapathConfiguration="&{false false false false false }" interface=lxcac862907245d k8sPodName=openstack/barbican-rabbit-init-vmkb2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e9fddc7f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-rabbit-init-vmkb2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e9fddc7f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d88501b7-3211-4f79-9b32-a91c9bf37f13,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d88501b7-3211-4f79-9b32-a91c9bf37f13,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-rabbit-init-vmkb2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d88501b7-3211-4f79-9b32-a91c9bf37f13;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d88501b7-3211-4f79-9b32-a91c9bf37f13;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1e9fddc7f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=24339 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d88501b7-3211-4f79-9b32-a91c9bf37f13,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d88501b7-3211-4f79-9b32-a91c9bf37f13,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-rabbit-init-vmkb2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e9fddc7f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=24339 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-rabbit-init-vmkb2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e9fddc7f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=187 identity=24339 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-rabbit-init-vmkb2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e9fddc7f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=187 identity=24339 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-rabbit-init-vmkb2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1e9fddc7f3 endpointID=187 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-vmkb2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d88501b7-3211-4f79-9b32-a91c9bf37f13 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d88501b7-3211-4f79-9b32-a91c9bf37f13 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1e9fddc7f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=187 identity=24339 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-rabbit-init-vmkb2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 eeface5f-fa2d-4837-8958-63e12960c1a5 default }" containerID=13ee5fffa0e0dbd3478059cfd14655d0913bb2d4b1272ba0ef135590d94b4889 datapathConfiguration="&{false false false false false }" interface=lxcb2faaacf5176 k8sPodName=openstack/barbican-ks-service-r5tlj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13ee5fffa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3511 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-service-r5tlj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13ee5fffa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3511 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1890067e-ab4a-4a7f-8d7a-514d65e095bd,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=1890067e-ab4a-4a7f-8d7a-514d65e095bd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-service-r5tlj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1890067e-ab4a-4a7f-8d7a-514d65e095bd;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=1890067e-ab4a-4a7f-8d7a-514d65e095bd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13ee5fffa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3511 identity=4252 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1890067e-ab4a-4a7f-8d7a-514d65e095bd,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=1890067e-ab4a-4a7f-8d7a-514d65e095bd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-service-r5tlj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=13ee5fffa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3511 identity=4252 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-service-r5tlj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=13ee5fffa0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3511 identity=4252 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-service-r5tlj subsys=endpoint level=info msg="Successful endpoint creation" containerID=13ee5fffa0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3511 identity=4252 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-service-r5tlj subsys=daemon level=info msg="Delete endpoint request" containerID=13ee5fffa0 endpointID=3511 k8sNamespace=openstack k8sPodName=barbican-ks-service-r5tlj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1890067e-ab4a-4a7f-8d7a-514d65e095bd k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=1890067e-ab4a-4a7f-8d7a-514d65e095bd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=13ee5fffa0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3511 identity=4252 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-service-r5tlj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 d673fc2e-8659-4d18-964d-60df39f53b9f default }" containerID=c043d04d8a99e21e52b5a5400ef4d595967e7dec553b6c5a5ba238c31f3454d5 datapathConfiguration="&{false false false false false }" interface=lxc9ef3abc171f8 k8sPodName=openstack/barbican-ks-endpoints-7zjxq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c043d04d8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7zjxq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c043d04d8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a8bac382-f254-4d89-ade3-6fddb3f9450b,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a8bac382-f254-4d89-ade3-6fddb3f9450b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7zjxq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c043d04d8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7zjxq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a8bac382-f254-4d89-ade3-6fddb3f9450b;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=a8bac382-f254-4d89-ade3-6fddb3f9450b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c043d04d8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 identity=1847 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a8bac382-f254-4d89-ade3-6fddb3f9450b,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a8bac382-f254-4d89-ade3-6fddb3f9450b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7zjxq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c043d04d8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 identity=1847 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7zjxq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c043d04d8a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3476 identity=1847 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7zjxq subsys=endpoint level=info msg="Successful endpoint creation" containerID=c043d04d8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3476 identity=1847 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7zjxq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c043d04d8a endpointID=3476 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-7zjxq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a8bac382-f254-4d89-ade3-6fddb3f9450b k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=a8bac382-f254-4d89-ade3-6fddb3f9450b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c043d04d8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3476 identity=1847 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7zjxq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 f95b2433-cada-45f8-aeda-2da0336182bf default }" containerID=fa59c58df1fd77c18bb8e4afb9b4f4b05c5726c69f6e99afe8e9e41e878944c6 datapathConfiguration="&{false false false false false }" interface=lxcb2bc9718fe3e k8sPodName=openstack/barbican-ks-user-bp9bq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa59c58df1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-user-bp9bq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa59c58df1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4e9309af-020b-44fa-ae7f-bc4c9fc628d1,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=4e9309af-020b-44fa-ae7f-bc4c9fc628d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-user-bp9bq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4e9309af-020b-44fa-ae7f-bc4c9fc628d1;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=4e9309af-020b-44fa-ae7f-bc4c9fc628d1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa59c58df1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identity=1565 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4e9309af-020b-44fa-ae7f-bc4c9fc628d1,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=4e9309af-020b-44fa-ae7f-bc4c9fc628d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-user-bp9bq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa59c58df1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identity=1565 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-user-bp9bq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fa59c58df1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=701 identity=1565 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-user-bp9bq subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa59c58df1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=701 identity=1565 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-user-bp9bq subsys=daemon level=info msg="Delete endpoint request" containerID=fa59c58df1 endpointID=701 k8sNamespace=openstack k8sPodName=barbican-ks-user-bp9bq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4e9309af-020b-44fa-ae7f-bc4c9fc628d1 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=4e9309af-020b-44fa-ae7f-bc4c9fc628d1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fa59c58df1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=701 identity=1565 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-user-bp9bq subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.110 fab301c4-2601-4e9b-8111-c894f41f3111 default }" containerID=149ebc6d93ac9d649e0f0dd9f851c1022399ac008122363cd6b53294638b2f35 datapathConfiguration="&{false false false false false }" interface=lxc68527476750f k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v8r65 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=149ebc6d93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2104 ipv4=10.0.0.110 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v8r65 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=149ebc6d93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2104 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.110 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v8r65 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=149ebc6d93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2104 identity=2694 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.110 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v8r65 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=149ebc6d93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2104 identity=2694 ipv4=10.0.0.110 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v8r65 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=149ebc6d93 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2104 identity=2694 ipv4=10.0.0.110 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v8r65 subsys=endpoint level=info msg="Successful endpoint creation" containerID=149ebc6d93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2104 identity=2694 ipv4=10.0.0.110 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v8r65 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.108 62f305fc-0656-481a-b8d7-ebf1e30e690c default }" containerID=f00d701cfbb4cf3cd9fe68c60cae1fc714099eed816877e42aaafd346f68fa09 datapathConfiguration="&{false false false false false }" interface=lxc1880d1d710a1 k8sPodName=openstack/rook-ceph-detect-version-bmnnj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f00d701cfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1659 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bmnnj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f00d701cfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1659 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=5aa34438-f857-412e-b49f-8096d98a79db,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=5aa34438-f857-412e-b49f-8096d98a79db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bmnnj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=5aa34438-f857-412e-b49f-8096d98a79db;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=5aa34438-f857-412e-b49f-8096d98a79db;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f00d701cfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1659 identity=14753 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=5aa34438-f857-412e-b49f-8096d98a79db,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=5aa34438-f857-412e-b49f-8096d98a79db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bmnnj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f00d701cfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1659 identity=14753 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bmnnj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f00d701cfb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1659 identity=14753 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bmnnj subsys=endpoint level=info msg="Successful endpoint creation" containerID=f00d701cfb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1659 identity=14753 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bmnnj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f00d701cfb endpointID=1659 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-bmnnj subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=5aa34438-f857-412e-b49f-8096d98a79db k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=5aa34438-f857-412e-b49f-8096d98a79db k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=f00d701cfb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1659 identity=14753 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bmnnj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 fc0121ff-0b20-4a2f-a2c6-0d1cbb0799c9 default }" containerID=c149396bfb5fb3f120230f42b6d1603c22c30b63b8777bb1f21b16355202a567 datapathConfiguration="&{false false false false false }" interface=lxc7ee311ce38a9 k8sPodName=openstack/ceph-object-controller-detect-version-th4ks labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c149396bfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1026 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-th4ks subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c149396bfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1026 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=7f59dcee-6c35-4af6-ba6f-43bbe2cfce63,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=7f59dcee-6c35-4af6-ba6f-43bbe2cfce63,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-th4ks subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c149396bfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1026 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.195 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-th4ks line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=7f59dcee-6c35-4af6-ba6f-43bbe2cfce63;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=7f59dcee-6c35-4af6-ba6f-43bbe2cfce63;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c149396bfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1026 identity=17775 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=7f59dcee-6c35-4af6-ba6f-43bbe2cfce63,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=7f59dcee-6c35-4af6-ba6f-43bbe2cfce63,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-th4ks oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c149396bfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1026 identity=17775 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-th4ks subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c149396bfb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1026 identity=17775 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-th4ks subsys=endpoint level=info msg="Successful endpoint creation" containerID=c149396bfb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1026 identity=17775 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-th4ks subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c149396bfb endpointID=1026 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-th4ks subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=7f59dcee-6c35-4af6-ba6f-43bbe2cfce63 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=7f59dcee-6c35-4af6-ba6f-43bbe2cfce63 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=c149396bfb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1026 identity=17775 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-th4ks subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 07856be9-e5b1-4b30-9c1b-013c93ff0284 default }" containerID=3b6eac7a68b90954911b5e05c862d598b61efa3d05df27a09ad9042fb8713a1d datapathConfiguration="&{false false false false false }" interface=lxc8c1205ab6c1b k8sPodName=local-path-storage/helper-pod-create-pvc-5b87f3be-abfa-411e-af1a-4d2f8be51d80 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b6eac7a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b87f3be-abfa-411e-af1a-4d2f8be51d80 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b6eac7a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b87f3be-abfa-411e-af1a-4d2f8be51d80 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b6eac7a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identity=34603 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b87f3be-abfa-411e-af1a-4d2f8be51d80 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b6eac7a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identity=34603 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b87f3be-abfa-411e-af1a-4d2f8be51d80 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b6eac7a68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=75 identity=34603 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b87f3be-abfa-411e-af1a-4d2f8be51d80 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b6eac7a68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=75 identity=34603 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b87f3be-abfa-411e-af1a-4d2f8be51d80 subsys=daemon level=info msg="Delete endpoint request" containerID=3b6eac7a68 endpointID=75 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5b87f3be-abfa-411e-af1a-4d2f8be51d80 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3b6eac7a68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=75 identity=34603 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b87f3be-abfa-411e-af1a-4d2f8be51d80 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 2dce4123-84e9-44f5-8e1a-30166d606b32 default }" containerID=02dc2c1e468c3d85416df9c1e1aa54eb3a3c7ced5e922f2212eb279c1c05b2fe datapathConfiguration="&{false false false false false }" interface=lxc03c13abe9f0a k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02dc2c1e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3106 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02dc2c1e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3106 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=02dc2c1e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3106 identity=41180 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02dc2c1e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3106 identity=41180 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=02dc2c1e46 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3106 identity=41180 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=02dc2c1e46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3106 identity=41180 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.125 a73dff30-9328-4d1f-bad9-659cdbee912b default }" containerID=adf32824ec908682f01f0dd7218afcba4c13c41ad78ea2a2d8b89dc0df424bf5 datapathConfiguration="&{false false false false false }" interface=lxcaf6ecb6317f6 k8sPodName=openstack/glance-db-init-9fzbc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=adf32824ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-db-init-9fzbc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=adf32824ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e2cf80ba-47b2-4714-9799-ccc146015872,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=e2cf80ba-47b2-4714-9799-ccc146015872,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-db-init-9fzbc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e2cf80ba-47b2-4714-9799-ccc146015872;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=e2cf80ba-47b2-4714-9799-ccc146015872;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=adf32824ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identity=7307 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e2cf80ba-47b2-4714-9799-ccc146015872,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=e2cf80ba-47b2-4714-9799-ccc146015872,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-db-init-9fzbc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=adf32824ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identity=7307 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-db-init-9fzbc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=adf32824ec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1095 identity=7307 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-db-init-9fzbc subsys=endpoint level=info msg="Successful endpoint creation" containerID=adf32824ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1095 identity=7307 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-db-init-9fzbc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=adf32824ec endpointID=1095 k8sNamespace=openstack k8sPodName=glance-db-init-9fzbc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e2cf80ba-47b2-4714-9799-ccc146015872 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=e2cf80ba-47b2-4714-9799-ccc146015872 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=adf32824ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1095 identity=7307 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-db-init-9fzbc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 7f26bd3a-b6b8-42fd-90ff-9f158d4c5b37 default }" containerID=86f4bbc0fe0ead361eaf46f986c36dae40e44698ff5384f38859234bb9bca34e datapathConfiguration="&{false false false false false }" interface=lxc648157e086f4 k8sPodName=openstack/glance-db-sync-kbggz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86f4bbc0fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-db-sync-kbggz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86f4bbc0fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c4febdc8-10c5-4a50-9f94-bba54fb0b435,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=c4febdc8-10c5-4a50-9f94-bba54fb0b435,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-db-sync-kbggz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c4febdc8-10c5-4a50-9f94-bba54fb0b435;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=c4febdc8-10c5-4a50-9f94-bba54fb0b435;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86f4bbc0fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 identity=16425 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c4febdc8-10c5-4a50-9f94-bba54fb0b435,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=c4febdc8-10c5-4a50-9f94-bba54fb0b435,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-db-sync-kbggz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86f4bbc0fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 identity=16425 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-db-sync-kbggz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=86f4bbc0fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1137 identity=16425 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-db-sync-kbggz subsys=endpoint level=info msg="Successful endpoint creation" containerID=86f4bbc0fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1137 identity=16425 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-db-sync-kbggz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.103 b6e79542-5f49-481e-bfd7-15f1a6e8fed8 default }" containerID=d9a8392eac574b3d1f7f690e7e165430657bf6d7f2dde323d94d28e128270369 datapathConfiguration="&{false false false false false }" interface=lxc40e090f5655b k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cjsxt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9a8392eac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cjsxt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9a8392eac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cjsxt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9a8392eac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identity=26890 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cjsxt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9a8392eac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identity=26890 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cjsxt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d9a8392eac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=547 identity=26890 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cjsxt subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9a8392eac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=547 identity=26890 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-cjsxt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.219 57dae9c5-91f2-41de-800c-b93cf309020a default }" containerID=e69f52a91477b74e6a6bf044d45a046724ad5a1c29c73cbf6362d8b5fbe7dac0 datapathConfiguration="&{false false false false false }" interface=lxc8c30f4fd27da k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fblhx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e69f52a914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fblhx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e69f52a914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fblhx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e69f52a914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identity=20229 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fblhx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e69f52a914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3488 identity=20229 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fblhx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e69f52a914 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3488 identity=20229 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fblhx subsys=endpoint level=info msg="Successful endpoint creation" containerID=e69f52a914 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3488 identity=20229 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fblhx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=86f4bbc0fe endpointID=1137 k8sNamespace=openstack k8sPodName=glance-db-sync-kbggz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c4febdc8-10c5-4a50-9f94-bba54fb0b435 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=c4febdc8-10c5-4a50-9f94-bba54fb0b435 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=86f4bbc0fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1137 identity=16425 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-db-sync-kbggz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 a54301ea-6ae6-4f63-9843-2a2b22dbb84b default }" containerID=6779fd16e778c530dee363fcfdfb93ed5cd8c11d3802aa4471806f7c34c67673 datapathConfiguration="&{false false false false false }" interface=lxce72caa68e4fe k8sPodName=openstack/glance-rabbit-init-wt9mn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6779fd16e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=799 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-rabbit-init-wt9mn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6779fd16e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=799 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4d3b2539-24e3-4499-85c1-eb247e293e2f,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4d3b2539-24e3-4499-85c1-eb247e293e2f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-rabbit-init-wt9mn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4d3b2539-24e3-4499-85c1-eb247e293e2f;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4d3b2539-24e3-4499-85c1-eb247e293e2f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6779fd16e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=799 identity=16787 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4d3b2539-24e3-4499-85c1-eb247e293e2f,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4d3b2539-24e3-4499-85c1-eb247e293e2f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-rabbit-init-wt9mn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6779fd16e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=799 identity=16787 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-rabbit-init-wt9mn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6779fd16e7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=799 identity=16787 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-rabbit-init-wt9mn subsys=endpoint level=info msg="Successful endpoint creation" containerID=6779fd16e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=799 identity=16787 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-rabbit-init-wt9mn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6779fd16e7 endpointID=799 k8sNamespace=openstack k8sPodName=glance-rabbit-init-wt9mn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4d3b2539-24e3-4499-85c1-eb247e293e2f k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4d3b2539-24e3-4499-85c1-eb247e293e2f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6779fd16e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=799 identity=16787 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-rabbit-init-wt9mn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 b4d13970-b533-4176-9ab1-a49b838ec8f5 default }" containerID=c3ba8fde7f92d395b3b4a3056be98b23ee7f1a799b244501cf91083571c9f25b datapathConfiguration="&{false false false false false }" interface=lxce3e7c205caeb k8sPodName=openstack/glance-ks-service-2q7fs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3ba8fde7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-ks-service-2q7fs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3ba8fde7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1e8c0b1a-7719-4d2e-99e2-7e3f18e1df1d,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=1e8c0b1a-7719-4d2e-99e2-7e3f18e1df1d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-ks-service-2q7fs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1e8c0b1a-7719-4d2e-99e2-7e3f18e1df1d;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=1e8c0b1a-7719-4d2e-99e2-7e3f18e1df1d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c3ba8fde7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identity=15412 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1e8c0b1a-7719-4d2e-99e2-7e3f18e1df1d,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=1e8c0b1a-7719-4d2e-99e2-7e3f18e1df1d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-ks-service-2q7fs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3ba8fde7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identity=15412 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-ks-service-2q7fs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3ba8fde7f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=891 identity=15412 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-ks-service-2q7fs subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3ba8fde7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=891 identity=15412 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-ks-service-2q7fs subsys=daemon level=info msg="Delete endpoint request" containerID=c3ba8fde7f endpointID=891 k8sNamespace=openstack k8sPodName=glance-ks-service-2q7fs subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1e8c0b1a-7719-4d2e-99e2-7e3f18e1df1d k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=1e8c0b1a-7719-4d2e-99e2-7e3f18e1df1d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c3ba8fde7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=891 identity=15412 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-ks-service-2q7fs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 c39d16f1-b76f-4f35-b8db-a58c1f5e39de default }" containerID=c353ae592aa984ec6018a3e4f783154c65aa344967743b01abcf4e2a0418c850 datapathConfiguration="&{false false false false false }" interface=lxca862f311b3cb k8sPodName=openstack/glance-ks-endpoints-49b7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c353ae592a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-endpoints-49b7f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c353ae592a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ad474630-9008-4a20-97d0-760eba6c9280,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ad474630-9008-4a20-97d0-760eba6c9280,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-endpoints-49b7f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ad474630-9008-4a20-97d0-760eba6c9280;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=ad474630-9008-4a20-97d0-760eba6c9280;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c353ae592a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identity=5311 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ad474630-9008-4a20-97d0-760eba6c9280,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ad474630-9008-4a20-97d0-760eba6c9280,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-endpoints-49b7f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c353ae592a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identity=5311 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-endpoints-49b7f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c353ae592a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2345 identity=5311 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-endpoints-49b7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=c353ae592a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2345 identity=5311 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-endpoints-49b7f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c353ae592a endpointID=2345 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-49b7f subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ad474630-9008-4a20-97d0-760eba6c9280 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=ad474630-9008-4a20-97d0-760eba6c9280 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c353ae592a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2345 identity=5311 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-endpoints-49b7f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 41af5e23-d54c-40f9-9269-1366858d0370 default }" containerID=7ec387f8206718a25803f8689c0f399fde04b0a082d17e78136368d1ef644aa5 datapathConfiguration="&{false false false false false }" interface=lxcbf4be5a87589 k8sPodName=openstack/glance-ks-user-4spld labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ec387f820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-ks-user-4spld subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ec387f820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9747d293-0169-45f7-a51e-12da225e7ca6,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=9747d293-0169-45f7-a51e-12da225e7ca6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-ks-user-4spld subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9747d293-0169-45f7-a51e-12da225e7ca6;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=9747d293-0169-45f7-a51e-12da225e7ca6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ec387f820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 identity=8749 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9747d293-0169-45f7-a51e-12da225e7ca6,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=9747d293-0169-45f7-a51e-12da225e7ca6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-ks-user-4spld oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ec387f820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 identity=8749 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-ks-user-4spld subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7ec387f820 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1230 identity=8749 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-ks-user-4spld subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ec387f820 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1230 identity=8749 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-ks-user-4spld subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7ec387f820 endpointID=1230 k8sNamespace=openstack k8sPodName=glance-ks-user-4spld subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9747d293-0169-45f7-a51e-12da225e7ca6 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=9747d293-0169-45f7-a51e-12da225e7ca6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7ec387f820 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1230 identity=8749 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-ks-user-4spld subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 72402223-0f09-4233-a875-9f55b0739b81 default }" containerID=8e24c6ee7edc0f6c29f2dd496927fe921a8cba55b2a1b94c43420b609eac0717 datapathConfiguration="&{false false false false false }" interface=lxc77bf0c30d1c5 k8sPodName=openstack/glance-metadefs-load-km9sl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e24c6ee7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=864 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-metadefs-load-km9sl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e24c6ee7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=864 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=69d1a57d-b0b8-4ea7-bb7b-9d57874773c6,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=69d1a57d-b0b8-4ea7-bb7b-9d57874773c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-metadefs-load-km9sl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=69d1a57d-b0b8-4ea7-bb7b-9d57874773c6;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=69d1a57d-b0b8-4ea7-bb7b-9d57874773c6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e24c6ee7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=864 identity=6460 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=69d1a57d-b0b8-4ea7-bb7b-9d57874773c6,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=69d1a57d-b0b8-4ea7-bb7b-9d57874773c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-metadefs-load-km9sl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e24c6ee7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=864 identity=6460 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-metadefs-load-km9sl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8e24c6ee7e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=864 identity=6460 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-metadefs-load-km9sl subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e24c6ee7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=864 identity=6460 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-metadefs-load-km9sl subsys=daemon level=info msg="Delete endpoint request" containerID=8e24c6ee7e endpointID=864 k8sNamespace=openstack k8sPodName=glance-metadefs-load-km9sl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=69d1a57d-b0b8-4ea7-bb7b-9d57874773c6 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=69d1a57d-b0b8-4ea7-bb7b-9d57874773c6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8e24c6ee7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=864 identity=6460 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-metadefs-load-km9sl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 efa21a69-dbfa-47c2-9539-cf02f670ecc0 default }" containerID=a1f59da410c97894bd504f6107cbc9f80feffa03248dff65bf719edccd680948 datapathConfiguration="&{false false false false false }" interface=lxcc3daba789065 k8sPodName=openstack/glance-storage-init-whd7c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1f59da410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4085 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-storage-init-whd7c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1f59da410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4085 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=723aba77-f0f1-453d-82f1-4441e2c47eb2,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=723aba77-f0f1-453d-82f1-4441e2c47eb2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-storage-init-whd7c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a1f59da410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4085 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-storage-init-whd7c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=723aba77-f0f1-453d-82f1-4441e2c47eb2;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=723aba77-f0f1-453d-82f1-4441e2c47eb2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1f59da410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4085 identity=7814 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=723aba77-f0f1-453d-82f1-4441e2c47eb2,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=723aba77-f0f1-453d-82f1-4441e2c47eb2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-storage-init-whd7c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1f59da410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4085 identity=7814 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-storage-init-whd7c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1f59da410 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4085 identity=7814 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-storage-init-whd7c subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1f59da410 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4085 identity=7814 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-storage-init-whd7c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a1f59da410 endpointID=4085 k8sNamespace=openstack k8sPodName=glance-storage-init-whd7c subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=723aba77-f0f1-453d-82f1-4441e2c47eb2 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=723aba77-f0f1-453d-82f1-4441e2c47eb2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a1f59da410 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4085 identity=7814 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-storage-init-whd7c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 4151cc0b-2db6-42a5-8cc7-b2fcea6c1cbf default }" containerID=29c15e27e56d9c20da033a1a740129126523c4d3fe257fd1d339448af7995669 datapathConfiguration="&{false false false false false }" interface=lxc8c697b222459 k8sPodName=openstack/glance-api-5cc8559744-fgr96 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29c15e27e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=427 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-api-5cc8559744-fgr96 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29c15e27e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=427 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-api-5cc8559744-fgr96 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29c15e27e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=427 identity=52098 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-api-5cc8559744-fgr96 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29c15e27e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=427 identity=52098 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-api-5cc8559744-fgr96 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=29c15e27e5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=427 identity=52098 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-api-5cc8559744-fgr96 subsys=endpoint level=info msg="Successful endpoint creation" containerID=29c15e27e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=427 identity=52098 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-api-5cc8559744-fgr96 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 a6f6851e-31cd-4ce8-b574-6b3ae4cbb73b default }" containerID=095e089e739f7c80a424e589f0193cd972c9d9e50f077771f75b6faf8ad041a4 datapathConfiguration="&{false false false false false }" interface=lxc84882eb5523f k8sPodName=openstack/staffeln-conductor-7fbb8f6d74-xfsrb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=095e089e73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3009 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-conductor-7fbb8f6d74-xfsrb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=095e089e73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3009 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-conductor-7fbb8f6d74-xfsrb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=095e089e73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3009 identity=47312 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-conductor-7fbb8f6d74-xfsrb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=095e089e73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3009 identity=47312 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-conductor-7fbb8f6d74-xfsrb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 60bcb66f-798b-400b-95bf-03cb94cf280f default }" containerID=ea9873a0e82dcd75365e975b8dc4cabef4e8d8762c4c97f58cd3ba8a8c05e54c datapathConfiguration="&{false false false false false }" interface=lxc9cdcc24761f4 k8sPodName=openstack/staffeln-api-7c494b8dbf-7nhkv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea9873a0e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/staffeln-api-7c494b8dbf-7nhkv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea9873a0e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/staffeln-api-7c494b8dbf-7nhkv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea9873a0e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 identity=13252 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/staffeln-api-7c494b8dbf-7nhkv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea9873a0e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 identity=13252 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/staffeln-api-7c494b8dbf-7nhkv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=095e089e73 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3009 identity=47312 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-conductor-7fbb8f6d74-xfsrb subsys=endpoint level=info msg="Successful endpoint creation" containerID=095e089e73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3009 identity=47312 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-conductor-7fbb8f6d74-xfsrb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.150 0bb7751b-5803-4c44-be56-32e9fdeb8959 default }" containerID=355f3f3640ec2a5937426943d37e1f46ef9ccd754430bbb5c7def00bb459e4e0 datapathConfiguration="&{false false false false false }" interface=lxc48baee8eb492 k8sPodName=openstack/staffeln-db-init-8ql6p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=355f3f3640 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2651 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/staffeln-db-init-8ql6p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=355f3f3640 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2651 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=db1ae3f4-3a67-4b41-affd-72a44b083a72,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=db1ae3f4-3a67-4b41-affd-72a44b083a72,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/staffeln-db-init-8ql6p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=db1ae3f4-3a67-4b41-affd-72a44b083a72;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=db1ae3f4-3a67-4b41-affd-72a44b083a72;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=355f3f3640 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2651 identity=1941 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=db1ae3f4-3a67-4b41-affd-72a44b083a72,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=db1ae3f4-3a67-4b41-affd-72a44b083a72,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/staffeln-db-init-8ql6p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=355f3f3640 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2651 identity=1941 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/staffeln-db-init-8ql6p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea9873a0e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1125 identity=13252 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/staffeln-api-7c494b8dbf-7nhkv subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea9873a0e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1125 identity=13252 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/staffeln-api-7c494b8dbf-7nhkv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=355f3f3640 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2651 identity=1941 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/staffeln-db-init-8ql6p subsys=endpoint level=info msg="Successful endpoint creation" containerID=355f3f3640 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2651 identity=1941 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/staffeln-db-init-8ql6p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=355f3f3640 endpointID=2651 k8sNamespace=openstack k8sPodName=staffeln-db-init-8ql6p subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=db1ae3f4-3a67-4b41-affd-72a44b083a72 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=db1ae3f4-3a67-4b41-affd-72a44b083a72 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=355f3f3640 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2651 identity=1941 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/staffeln-db-init-8ql6p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 3ea3061e-a984-4207-ab46-ccfcce4db6c3 default }" containerID=853e3d118ca22a55a995de27d61ced6a2810db759b2a079bb22c78cfd13cc7c3 datapathConfiguration="&{false false false false false }" interface=lxcb8cce67b3422 k8sPodName=openstack/staffeln-db-sync-btq9x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=853e3d118c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/staffeln-db-sync-btq9x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=853e3d118c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d3fd4c3f-8e02-41e2-a900-801fb28651bc,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=d3fd4c3f-8e02-41e2-a900-801fb28651bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/staffeln-db-sync-btq9x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=853e3d118c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.101 ipv6= k8sPodName=openstack/staffeln-db-sync-btq9x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=d3fd4c3f-8e02-41e2-a900-801fb28651bc;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=d3fd4c3f-8e02-41e2-a900-801fb28651bc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=853e3d118c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 identity=53812 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d3fd4c3f-8e02-41e2-a900-801fb28651bc,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=d3fd4c3f-8e02-41e2-a900-801fb28651bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/staffeln-db-sync-btq9x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=853e3d118c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 identity=53812 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/staffeln-db-sync-btq9x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=853e3d118c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=266 identity=53812 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/staffeln-db-sync-btq9x subsys=endpoint level=info msg="Successful endpoint creation" containerID=853e3d118c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=266 identity=53812 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/staffeln-db-sync-btq9x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager