level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="971.511µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="51.242µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="885.098µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.54µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=108.379173ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.48µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="37.881µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="79.493µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="77.713µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="87.153µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="428.663µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.64µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.038609ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.945608ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="36.621µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="39.281µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="254.528µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="117.923µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="93.603µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=49.821449ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="94.263µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="5.991µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.631µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.19.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.493091ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="16.99µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.418482ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.65µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.495883ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.12µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.67µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.58µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.21µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.581µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="28.94µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="14.771µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="50.152µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="373.922µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.58µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="229.648µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=6.242127ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="873.357µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.3µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="16.401µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.19 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.19 ipAddr.ipv6="" k8sNodeIP=199.204.45.19 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.19" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.203" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.19" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.19} {CiliumInternalIP 10.0.0.203}] 10.0.0.0/24 [] [] 10.0.0.200 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:46825" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.497989994s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="21.931µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="8.281µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="78.393µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="13.771µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.686343886s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=312.579064ms file-path=/var/run/cilium/state/templates/2e2b26f0f31c6be81045300c9b039728143f3c8652cc397eabbaf382cdb139b3/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.220 e4c41fc9-10d1-497a-89c6-b5afff07d34b default }" containerID=b01407787940c84d60c3b1b5a1f5a9a660b281cee341e463e59c8e313b3c6003 datapathConfiguration="&{false false false false false }" interface=lxcc9c8fc968dc7 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dpqz7 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.254 60834087-0450-43d1-8ca3-17120800d89d default }" containerID=7bcbac608e6c7a1b66e0aff57eb0a4087490ac8bf37d00d66c120d7350da7b1a datapathConfiguration="&{false false false false false }" interface=lxcb2d492bf5f33 k8sPodName=kube-system/coredns-7c96b6546b-ptn2s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b014077879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dpqz7 subsys=endpoint level=info msg="New endpoint" containerID=7bcbac608e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ptn2s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b014077879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=8309fced-d720-4a32-9cda-b0ba3030d829,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=8309fced-d720-4a32-9cda-b0ba3030d829,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dpqz7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=7bcbac608e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ptn2s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b014077879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dpqz7 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=7bcbac608e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ptn2s line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=8309fced-d720-4a32-9cda-b0ba3030d829;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=8309fced-d720-4a32-9cda-b0ba3030d829;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b014077879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identity=5493 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=8309fced-d720-4a32-9cda-b0ba3030d829,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=8309fced-d720-4a32-9cda-b0ba3030d829,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dpqz7 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=b014077879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identity=5493 ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dpqz7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3896 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7bcbac608e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 identity=30128 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ptn2s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7bcbac608e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 identity=30128 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ptn2s subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 ipv4=10.0.0.200 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 identityLabels="reserved:health" ipv4=10.0.0.200 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 identity=4 identityLabels="reserved:health" ipv4=10.0.0.200 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.096071877s file-path=/var/run/cilium/state/templates/6016a17961c8b3d615995277a0af05e19b421deb198ade0d0b5c7be6e9835a9d/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=b014077879 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2295 identity=5493 ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dpqz7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b014077879 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2295 identity=5493 ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dpqz7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=277 identity=4 ipv4=10.0.0.200 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7bcbac608e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2867 identity=30128 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ptn2s subsys=endpoint level=info msg="Successful endpoint creation" containerID=7bcbac608e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2867 identity=30128 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ptn2s subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b014077879 endpointID=2295 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-dpqz7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=8309fced-d720-4a32-9cda-b0ba3030d829 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=8309fced-d720-4a32-9cda-b0ba3030d829 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=b014077879 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2295 identity=5493 ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dpqz7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 69982116-6db2-45be-9754-941f90fad12c default }" containerID=f5a528e84d2da29e646d4732e4f79d4c250bdfbbffe024a069589c38dd784215 datapathConfiguration="&{false false false false false }" interface=lxc97e792eb0501 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nc4zk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5a528e84d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3873 ipv4=10.0.0.192 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nc4zk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5a528e84d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3873 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.192 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nc4zk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f5a528e84d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3873 identity=27742 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.192 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nc4zk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5a528e84d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3873 identity=27742 ipv4=10.0.0.192 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nc4zk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5a528e84d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3873 identity=27742 ipv4=10.0.0.192 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nc4zk subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5a528e84d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3873 identity=27742 ipv4=10.0.0.192 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nc4zk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3896 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03896 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03896 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03896 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03896:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3896 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 872d4326-ff65-4875-b07a-a1497b25665c default }" containerID=97eae7e6555dca41d9f71c12035e18777b63de45b241170f7abbc2bc0a1086db datapathConfiguration="&{false false false false false }" interface=lxc9fbd177f7463 k8sPodName=kube-system/coredns-67659f764b-95fk7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97eae7e655 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 ipv4=10.0.0.238 ipv6= k8sPodName=kube-system/coredns-67659f764b-95fk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97eae7e655 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.238 ipv6= k8sPodName=kube-system/coredns-67659f764b-95fk7 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=97eae7e655 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 identity=30128 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.238 ipv6= k8sPodName=kube-system/coredns-67659f764b-95fk7 oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 92dd8ae2-3e4b-43a9-b949-4a0d88ba197a default }" containerID=887f0f40f46c8d9d4c0e169aacbbedf7ba6ecbb0a9362bc72ea1b01af9c59377 datapathConfiguration="&{false false false false false }" interface=lxc5e89ba5f0231 k8sPodName=kube-system/coredns-67659f764b-wtnjn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=887f0f40f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3895 ipv4=10.0.0.24 ipv6= k8sPodName=kube-system/coredns-67659f764b-wtnjn subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97eae7e655 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2449 identity=30128 ipv4=10.0.0.238 ipv6= k8sPodName=kube-system/coredns-67659f764b-95fk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=887f0f40f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3895 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.24 ipv6= k8sPodName=kube-system/coredns-67659f764b-wtnjn subsys=endpoint level=info msg="Identity of endpoint changed" containerID=887f0f40f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3895 identity=30128 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.24 ipv6= k8sPodName=kube-system/coredns-67659f764b-wtnjn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=887f0f40f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3895 identity=30128 ipv4=10.0.0.24 ipv6= k8sPodName=kube-system/coredns-67659f764b-wtnjn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=97eae7e655 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2449 identity=30128 ipv4=10.0.0.238 ipv6= k8sPodName=kube-system/coredns-67659f764b-95fk7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=97eae7e655 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2449 identity=30128 ipv4=10.0.0.238 ipv6= k8sPodName=kube-system/coredns-67659f764b-95fk7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=887f0f40f4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3895 identity=30128 ipv4=10.0.0.24 ipv6= k8sPodName=kube-system/coredns-67659f764b-wtnjn subsys=endpoint level=info msg="Successful endpoint creation" containerID=887f0f40f4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3895 identity=30128 ipv4=10.0.0.24 ipv6= k8sPodName=kube-system/coredns-67659f764b-wtnjn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.172 3ebc96d0-ef9f-4695-b428-ea8162e2b5e1 default }" containerID=bedba6ea3632b7bcce5b0c2b467f36cdce55396cff59c8b4a02d49e3e49daa35 datapathConfiguration="&{false false false false false }" interface=lxc49b581c496b1 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tv4ld labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bedba6ea36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1787 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tv4ld subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bedba6ea36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1787 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tv4ld subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bedba6ea36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1787 identity=7889 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tv4ld oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bedba6ea36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1787 identity=7889 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tv4ld subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bedba6ea36 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1787 identity=7889 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tv4ld subsys=endpoint level=info msg="Successful endpoint creation" containerID=bedba6ea36 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1787 identity=7889 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tv4ld subsys=daemon level=info msg="Delete endpoint request" containerID=7bcbac608e endpointID=2867 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-ptn2s subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=7bcbac608e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2867 identity=30128 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ptn2s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 1bf231c0-f60c-44b0-9f55-1d2115726328 default }" containerID=42cd2629064c081dfa561f4fdb70dc828ecf9f269f7e8a844e5b1f79023a7290 datapathConfiguration="&{false false false false false }" interface=lxcee440617add0 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bqkps labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42cd262906 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 ipv4=10.0.0.91 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bqkps subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42cd262906 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.91 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bqkps subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42cd262906 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identity=28649 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.91 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bqkps oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42cd262906 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identity=28649 ipv4=10.0.0.91 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bqkps subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 ab251937-21c2-4896-9e98-7d392bf5f2a0 default }" containerID=141365c1a55d63a77c348ae02fcea90e1603d9c1f37ba59f63c499b76a33eb53 datapathConfiguration="&{false false false false false }" interface=lxcc6f0fa49f594 k8sPodName=cert-manager/cert-manager-75c4c745bc-ndz2t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=141365c1a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-ndz2t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 4e3f4d1b-82fb-4db9-bb5b-8a95e09c2045 default }" containerID=20324498e18aa16eccf5b498d3323f366ac041e702b8c0a1eaeafb4ed0835a25 datapathConfiguration="&{false false false false false }" interface=lxc461fecb1a405 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ch4ms labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20324498e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2731 ipv4=10.0.0.186 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ch4ms subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=141365c1a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-ndz2t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=20324498e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2731 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.186 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ch4ms subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=141365c1a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 identity=44800 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-ndz2t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=141365c1a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 identity=44800 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-ndz2t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20324498e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2731 identity=36069 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.186 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ch4ms oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20324498e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2731 identity=36069 ipv4=10.0.0.186 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ch4ms subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42cd262906 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1397 identity=28649 ipv4=10.0.0.91 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bqkps subsys=endpoint level=info msg="Successful endpoint creation" containerID=42cd262906 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1397 identity=28649 ipv4=10.0.0.91 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-bqkps subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=141365c1a5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=845 identity=44800 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-ndz2t subsys=endpoint level=info msg="Successful endpoint creation" containerID=141365c1a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=845 identity=44800 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-ndz2t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=20324498e1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2731 identity=36069 ipv4=10.0.0.186 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ch4ms subsys=endpoint level=info msg="Successful endpoint creation" containerID=20324498e1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2731 identity=36069 ipv4=10.0.0.186 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ch4ms subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.156 708dd346-f1db-472d-8d45-d373f4608591 default }" containerID=45addef6b21aaa499687ca834a721d9ed1b3dd767a4d7f703b7dee94dc5a02ee datapathConfiguration="&{false false false false false }" interface=lxc0cd6bdc02634 k8sPodName=cert-manager/cert-manager-startupapicheck-mx75g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45addef6b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1941 ipv4=10.0.0.156 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mx75g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45addef6b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1941 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=0ba60d2f-e52c-464d-be21-09262668a8dc,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=0ba60d2f-e52c-464d-be21-09262668a8dc,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.156 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mx75g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=0ba60d2f-e52c-464d-be21-09262668a8dc;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=0ba60d2f-e52c-464d-be21-09262668a8dc;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45addef6b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1941 identity=40174 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=0ba60d2f-e52c-464d-be21-09262668a8dc,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=0ba60d2f-e52c-464d-be21-09262668a8dc,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.156 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mx75g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45addef6b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1941 identity=40174 ipv4=10.0.0.156 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mx75g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45addef6b2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1941 identity=40174 ipv4=10.0.0.156 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mx75g subsys=endpoint level=info msg="Successful endpoint creation" containerID=45addef6b2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1941 identity=40174 ipv4=10.0.0.156 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mx75g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=45addef6b2 endpointID=1941 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-mx75g subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=0ba60d2f-e52c-464d-be21-09262668a8dc k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=0ba60d2f-e52c-464d-be21-09262668a8dc k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=45addef6b2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1941 identity=40174 ipv4=10.0.0.156 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mx75g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 d6f8d610-70f4-412f-a3c0-7efa3e3cc4d7 default }" containerID=87811e9bded3f29830128a708e84698072d718102050046b85ff87c597eb202f datapathConfiguration="&{false false false false false }" interface=lxcb2b2ba209dda k8sPodName=ingress-nginx/ingress-nginx-admission-create-prt94 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87811e9bde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 ipv4=10.0.0.81 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-prt94 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87811e9bde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e0de720a-d32a-43f7-ad86-8e15306a3c5f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=e0de720a-d32a-43f7-ad86-8e15306a3c5f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.81 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-prt94 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=87811e9bde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.81 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-prt94 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=e0de720a-d32a-43f7-ad86-8e15306a3c5f;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=e0de720a-d32a-43f7-ad86-8e15306a3c5f;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87811e9bde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 identity=36060 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e0de720a-d32a-43f7-ad86-8e15306a3c5f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=e0de720a-d32a-43f7-ad86-8e15306a3c5f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.81 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-prt94 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87811e9bde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 identity=36060 ipv4=10.0.0.81 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-prt94 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=87811e9bde datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2019 identity=36060 ipv4=10.0.0.81 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-prt94 subsys=endpoint level=info msg="Successful endpoint creation" containerID=87811e9bde datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2019 identity=36060 ipv4=10.0.0.81 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-prt94 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=87811e9bde endpointID=2019 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-prt94 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=e0de720a-d32a-43f7-ad86-8e15306a3c5f k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=e0de720a-d32a-43f7-ad86-8e15306a3c5f k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=87811e9bde datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2019 identity=36060 ipv4=10.0.0.81 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-prt94 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 f95ea006-c5de-4cbb-8c50-940ba70cabeb default }" containerID=bf12e89e8e2781239a43f4ba5f246bbac8a401db67aa3f7fe626c6d35bae762e datapathConfiguration="&{false false false false false }" interface=lxcde6fb218a6ac k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lldht labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf12e89e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1045 ipv4=10.0.0.135 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lldht subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf12e89e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1045 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.135 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lldht subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf12e89e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1045 identity=19934 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.135 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lldht oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf12e89e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1045 identity=19934 ipv4=10.0.0.135 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lldht subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bf12e89e8e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1045 identity=19934 ipv4=10.0.0.135 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lldht subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf12e89e8e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1045 identity=19934 ipv4=10.0.0.135 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lldht subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.234 67caeee4-681a-4c6e-82ec-1c7af97304d9 default }" containerID=e33d6155cc2e9d70235d5718d4bedab93076a2db90f5de64f1baef5b9fe76119 datapathConfiguration="&{false false false false false }" interface=lxca40f09561340 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ln85v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e33d6155cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1769 ipv4=10.0.0.234 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ln85v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e33d6155cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1769 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=61aaaebe-13e9-45ec-9302-3fe2baeca63e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=61aaaebe-13e9-45ec-9302-3fe2baeca63e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.234 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ln85v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=61aaaebe-13e9-45ec-9302-3fe2baeca63e;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=61aaaebe-13e9-45ec-9302-3fe2baeca63e;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e33d6155cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1769 identity=6031 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=61aaaebe-13e9-45ec-9302-3fe2baeca63e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=61aaaebe-13e9-45ec-9302-3fe2baeca63e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.234 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ln85v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e33d6155cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1769 identity=6031 ipv4=10.0.0.234 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ln85v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e33d6155cc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1769 identity=6031 ipv4=10.0.0.234 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ln85v subsys=endpoint level=info msg="Successful endpoint creation" containerID=e33d6155cc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1769 identity=6031 ipv4=10.0.0.234 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ln85v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e33d6155cc endpointID=1769 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-ln85v subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=61aaaebe-13e9-45ec-9302-3fe2baeca63e k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=61aaaebe-13e9-45ec-9302-3fe2baeca63e k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=e33d6155cc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1769 identity=6031 ipv4=10.0.0.234 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ln85v subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=11fba29c-9683-4ae5-bbf9-ee0ee9b5a0a2] Description:}]" policyAddRequest=9341d063-1882-428e-ba5f-04d5c8af3929 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=9341d063-1882-428e-ba5f-04d5c8af3929 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=6dd76d80-774f-4c4f-8388-0df4cfcc3e71] Description:}]" policyAddRequest=c8df13b9-837a-434d-9f07-0ae9a4472ce6 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c8df13b9-837a-434d-9f07-0ae9a4472ce6 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.25 0d85632c-bb39-4c1a-83ae-f8651da58309 default }" containerID=467766cbb8e2768b90ccb8978a32c6d2683e07c9703b14b97491da3dd79836e0 datapathConfiguration="&{false false false false false }" interface=lxccf7266066325 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-6ddw4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=467766cbb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-6ddw4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=467766cbb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-6ddw4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=467766cbb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 identity=6138 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-6ddw4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=467766cbb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 identity=6138 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-6ddw4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=467766cbb8 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1940 identity=6138 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-6ddw4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=467766cbb8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1940 identity=6138 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-6ddw4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.97 1adc3503-9409-4d04-9d7d-38e895846c22 default }" containerID=b604a8f707c3a29c3f7eb4c39ffa2646563c1edd09b4854125c8033b484cd16a datapathConfiguration="&{false false false false false }" interface=lxcc27959556163 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mjvlx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b604a8f707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3198 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mjvlx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b604a8f707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3198 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mjvlx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b604a8f707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3198 identity=4974 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mjvlx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b604a8f707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3198 identity=4974 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mjvlx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b604a8f707 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3198 identity=4974 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mjvlx subsys=endpoint level=info msg="Successful endpoint creation" containerID=b604a8f707 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3198 identity=4974 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mjvlx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 b4025799-b46b-4b0d-8cd4-b73f773fc966 default }" containerID=3cc4b857dca9d2110f78add89f1fe4fcd4acef03fef0b7b97b8993bb0e0fcca2 datapathConfiguration="&{false false false false false }" interface=lxc838ae64d9043 k8sPodName=openstack/pxc-operator-69cb5bbdb9-ls2qr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3cc4b857dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-ls2qr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3cc4b857dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-ls2qr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3cc4b857dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 identity=24553 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-ls2qr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3cc4b857dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 identity=24553 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-ls2qr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3cc4b857dc datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1067 identity=24553 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-ls2qr subsys=endpoint level=info msg="Successful endpoint creation" containerID=3cc4b857dc datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1067 identity=24553 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-ls2qr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.98 a64e92be-80db-4573-830a-36f09b3804d5 default }" containerID=da5d361039c006c822f9cfc4b20e69ea53eb344c396f1d8f6aedff4063352fcf datapathConfiguration="&{false false false false false }" interface=lxc0f870b2c5c0e k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da5d361039 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3017 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da5d361039 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3017 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=da5d361039 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3017 identity=65483 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da5d361039 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3017 identity=65483 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 ae7ca750-b79d-4cb2-9bcb-1aaa1c7354a1 default }" containerID=8a48d81caa4db8f4aa55dfa07d5b1588834e727ccc3c9bcd6ef369396469f85d datapathConfiguration="&{false false false false false }" interface=lxc6d93bb7319da k8sPodName=local-path-storage/helper-pod-create-pvc-45f5fdd7-da7e-43fd-ba18-fe90a7ed90f9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a48d81caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3919 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45f5fdd7-da7e-43fd-ba18-fe90a7ed90f9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a48d81caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3919 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45f5fdd7-da7e-43fd-ba18-fe90a7ed90f9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a48d81caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3919 identity=2612 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45f5fdd7-da7e-43fd-ba18-fe90a7ed90f9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a48d81caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3919 identity=2612 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45f5fdd7-da7e-43fd-ba18-fe90a7ed90f9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da5d361039 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3017 identity=65483 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=da5d361039 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3017 identity=65483 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8a48d81caa datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3919 identity=2612 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45f5fdd7-da7e-43fd-ba18-fe90a7ed90f9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a48d81caa datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3919 identity=2612 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45f5fdd7-da7e-43fd-ba18-fe90a7ed90f9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8a48d81caa endpointID=3919 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-45f5fdd7-da7e-43fd-ba18-fe90a7ed90f9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8a48d81caa datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3919 identity=2612 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45f5fdd7-da7e-43fd-ba18-fe90a7ed90f9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 540576c3-eef5-40a3-b6db-cc9c131064dd default }" containerID=ce7c935f32cff7de7ccea5400d8c01a8ebf0f88403c9be800de65ef883bedc48 datapathConfiguration="&{false false false false false }" interface=lxcf9422519c3e3 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce7c935f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce7c935f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ce7c935f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identity=15464 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce7c935f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identity=15464 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce7c935f32 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1533 identity=15464 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce7c935f32 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1533 identity=15464 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ed7b71f4-d300-4160-92cf-fe42771f0bfc] Description:}]" policyAddRequest=e445c743-f15d-4903-84f2-792f3b8938e8 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=e445c743-f15d-4903-84f2-792f3b8938e8 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.74 94f3cdc0-aa99-4a75-97d1-046719404c45 default }" containerID=d2dc2ec345db82dc5c5597b582ef22efbc25de4eccd82eb85db7975535e01df7 datapathConfiguration="&{false false false false false }" interface=lxc2a768a5e8f11 k8sPodName=local-path-storage/helper-pod-create-pvc-f53ba60e-eb9a-4e3f-be44-7e6b227f3ba9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2dc2ec345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3950 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f53ba60e-eb9a-4e3f-be44-7e6b227f3ba9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2dc2ec345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3950 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f53ba60e-eb9a-4e3f-be44-7e6b227f3ba9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2dc2ec345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3950 identity=2612 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f53ba60e-eb9a-4e3f-be44-7e6b227f3ba9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2dc2ec345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3950 identity=2612 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f53ba60e-eb9a-4e3f-be44-7e6b227f3ba9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2dc2ec345 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3950 identity=2612 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f53ba60e-eb9a-4e3f-be44-7e6b227f3ba9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2dc2ec345 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3950 identity=2612 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f53ba60e-eb9a-4e3f-be44-7e6b227f3ba9 subsys=daemon level=info msg="Delete endpoint request" containerID=d2dc2ec345 endpointID=3950 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f53ba60e-eb9a-4e3f-be44-7e6b227f3ba9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d2dc2ec345 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3950 identity=2612 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f53ba60e-eb9a-4e3f-be44-7e6b227f3ba9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 415d656d-78d9-4429-81e2-80335b04dfb4 default }" containerID=7313279f643aee059a1c8513e2868145ee3396aa908a80e9eee4c6a9077df9d8 datapathConfiguration="&{false false false false false }" interface=lxc67ee5e0fed39 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7313279f64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7313279f64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7313279f64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=49966 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7313279f64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=49966 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7313279f64 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1479 identity=49966 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7313279f64 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1479 identity=49966 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=8f854497-8565-4348-b8c9-09e3ee42c673] Description:}]" policyAddRequest=e386a1a9-adb2-438c-a6eb-f4341a715193 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=e386a1a9-adb2-438c-a6eb-f4341a715193 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.108 8a13d1ac-a275-4e6f-8a36-415efc6cdb8a default }" containerID=4274e6c0029bdffc090580a5750b1ba17eccd6e3f069741fc3b362942bf21d68 datapathConfiguration="&{false false false false false }" interface=lxc9a5542ebbb78 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4274e6c002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=345 ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4274e6c002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=345 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4274e6c002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=345 identity=56747 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4274e6c002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=345 identity=56747 ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4274e6c002 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=345 identity=56747 ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4274e6c002 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=345 identity=56747 ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.007128653942402641 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.138 d58454a6-eafa-4d85-b8de-1a67b8ce4ff2 default }" containerID=954ec33343b7d08842efec5cf95338f40c5927ac508359ecf2ee2d137bd5d4af datapathConfiguration="&{false false false false false }" interface=lxca441b533b952 k8sPodName=monitoring/node-feature-discovery-worker-mgjzg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=954ec33343 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2973 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mgjzg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=954ec33343 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2973 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mgjzg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=954ec33343 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2973 identity=26062 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mgjzg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=954ec33343 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2973 identity=26062 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mgjzg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.65 fa8c1f29-c277-4d3f-a80b-bf2d107fde6b default }" containerID=00f3aa0219aef1c42741001e76f2b064d970e69281815450b36beda95593481a datapathConfiguration="&{false false false false false }" interface=lxc86b12eefbe63 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7zpz6 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.216 479a4770-2276-4c46-a9fc-dffe73ea3b05 default }" containerID=5a80b9cfc4e4bf8063bfa7d183c797d5bdd772b7aaa28f42ebee99880ffad6bc datapathConfiguration="&{false false false false false }" interface=lxcee7740ba54ba k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bpw4c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00f3aa0219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3977 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7zpz6 subsys=endpoint level=info msg="New endpoint" containerID=5a80b9cfc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1468 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bpw4c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00f3aa0219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3977 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7zpz6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a80b9cfc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1468 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bpw4c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00f3aa0219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3977 identity=28568 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7zpz6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00f3aa0219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3977 identity=28568 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7zpz6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a80b9cfc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1468 identity=641 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bpw4c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a80b9cfc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1468 identity=641 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bpw4c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=954ec33343 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2973 identity=26062 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mgjzg subsys=endpoint level=info msg="Successful endpoint creation" containerID=954ec33343 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2973 identity=26062 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mgjzg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=00f3aa0219 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3977 identity=28568 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7zpz6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=00f3aa0219 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3977 identity=28568 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7zpz6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5a80b9cfc4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1468 identity=641 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bpw4c subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a80b9cfc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1468 identity=641 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bpw4c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.154 705e6003-4637-4cf6-a227-2ce8f042b834 default }" containerID=6e7edf77777fa940eb5302f7866ef1fa7ac854a67373ea8767c525f00cbced1e datapathConfiguration="&{false false false false false }" interface=lxca2d6477330ad k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gtz5m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e7edf7777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 ipv4=10.0.0.154 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gtz5m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e7edf7777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.154 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gtz5m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e7edf7777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 identity=11865 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.154 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gtz5m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e7edf7777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 identity=11865 ipv4=10.0.0.154 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gtz5m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e7edf7777 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=895 identity=11865 ipv4=10.0.0.154 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gtz5m subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e7edf7777 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=895 identity=11865 ipv4=10.0.0.154 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gtz5m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3896 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03896 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03896 subsys=bpf level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03896 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03896:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3896 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 74fe4e21-7699-48e5-b331-d683f7d01a38 default }" containerID=b9d5c07c39e70fa8f04a410bd1a365cf4efd3b7216fedccfbea01c2186bc1a4c datapathConfiguration="&{false false false false false }" interface=lxc63256cb9f284 k8sPodName=monitoring/kube-prometheus-stack-admission-create-lfwfz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9d5c07c39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lfwfz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9d5c07c39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=39e4f416-e742-41d6-8f77-452c11c2ec49,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=39e4f416-e742-41d6-8f77-452c11c2ec49,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lfwfz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=39e4f416-e742-41d6-8f77-452c11c2ec49;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=39e4f416-e742-41d6-8f77-452c11c2ec49;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9d5c07c39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 identity=23269 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=39e4f416-e742-41d6-8f77-452c11c2ec49,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=39e4f416-e742-41d6-8f77-452c11c2ec49,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lfwfz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9d5c07c39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 identity=23269 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lfwfz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b9d5c07c39 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=887 identity=23269 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lfwfz subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9d5c07c39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=887 identity=23269 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lfwfz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b9d5c07c39 endpointID=887 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-lfwfz subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=39e4f416-e742-41d6-8f77-452c11c2ec49 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=39e4f416-e742-41d6-8f77-452c11c2ec49 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=b9d5c07c39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=887 identity=23269 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lfwfz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 03f4dd9e-c8d8-4834-9b84-2889aad6ddf2 default }" containerID=9c91382a4f825c288e1ea46fc4d741afbd866bc41b11c5ba0a05a2e8dfbcb1d2 datapathConfiguration="&{false false false false false }" interface=lxc8ec5c6372e80 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2n84n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c91382a4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2n84n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c91382a4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2n84n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9c91382a4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2n84n line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c91382a4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 identity=33185 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2n84n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c91382a4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 identity=33185 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2n84n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 94d3fcda-9ca7-47d7-8c21-a4a384f1eb89 default }" containerID=ecc3bad2ad231262ac3c83682082023589b1ffcfbeb2ccc3e15b35d9f1cb4a58 datapathConfiguration="&{false false false false false }" interface=lxc230665d16e2a k8sPodName=monitoring/kube-prometheus-stack-grafana-5cbffd4649-hd948 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ecc3bad2ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cbffd4649-hd948 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ecc3bad2ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cbffd4649-hd948 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ecc3bad2ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 identity=37392 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cbffd4649-hd948 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ecc3bad2ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2263 identity=37392 ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cbffd4649-hd948 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 93701155-bf8b-4ff0-873a-437a2a7d72ae default }" containerID=98a15c189b812be004672505af5d85bb04229d39e8542e25c1038bf6a6b38dcc datapathConfiguration="&{false false false false false }" interface=lxca131d776133b k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4j7ph labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98a15c189b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3814 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4j7ph subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98a15c189b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3814 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4j7ph subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98a15c189b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3814 identity=43411 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4j7ph oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98a15c189b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3814 identity=43411 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4j7ph subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c91382a4f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=759 identity=33185 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2n84n subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c91382a4f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=759 identity=33185 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2n84n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ecc3bad2ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2263 identity=37392 ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cbffd4649-hd948 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ecc3bad2ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2263 identity=37392 ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cbffd4649-hd948 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=98a15c189b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3814 identity=43411 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4j7ph subsys=endpoint level=info msg="Successful endpoint creation" containerID=98a15c189b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3814 identity=43411 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4j7ph subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.88 247c9bad-00e3-462c-a6a3-07bfb08bed4a default }" containerID=5aa76a06e2b9206ec53ca9fcd7db0133e12318329ba7facd6a87a9069c868dbd datapathConfiguration="&{false false false false false }" interface=lxc08118f06c91a k8sPodName=monitoring/kube-prometheus-stack-admission-patch-66p4k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5aa76a06e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-66p4k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5aa76a06e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=8db5d6af-0047-4e5f-8710-b38aa897207e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=8db5d6af-0047-4e5f-8710-b38aa897207e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-66p4k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=8db5d6af-0047-4e5f-8710-b38aa897207e;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=8db5d6af-0047-4e5f-8710-b38aa897207e;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5aa76a06e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=58704 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=8db5d6af-0047-4e5f-8710-b38aa897207e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=8db5d6af-0047-4e5f-8710-b38aa897207e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-66p4k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5aa76a06e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=58704 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-66p4k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5aa76a06e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2047 identity=58704 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-66p4k subsys=endpoint level=info msg="Successful endpoint creation" containerID=5aa76a06e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2047 identity=58704 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-66p4k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.86 a10d4653-a491-499c-8032-c3775e286ec0 default }" containerID=02c703452fda9da9fb8006bf1dc6719ef9c245757f1519eeb81bbc12b4d12439 datapathConfiguration="&{false false false false false }" interface=lxc0731669dad40 k8sPodName=local-path-storage/helper-pod-create-pvc-f0ea4d3b-a019-4a4d-9e5a-aa2df0107227 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02c703452f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2690 ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0ea4d3b-a019-4a4d-9e5a-aa2df0107227 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02c703452f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2690 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0ea4d3b-a019-4a4d-9e5a-aa2df0107227 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02c703452f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2690 identity=2612 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0ea4d3b-a019-4a4d-9e5a-aa2df0107227 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02c703452f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2690 identity=2612 ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0ea4d3b-a019-4a4d-9e5a-aa2df0107227 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=02c703452f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2690 identity=2612 ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0ea4d3b-a019-4a4d-9e5a-aa2df0107227 subsys=endpoint level=info msg="Successful endpoint creation" containerID=02c703452f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2690 identity=2612 ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0ea4d3b-a019-4a4d-9e5a-aa2df0107227 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.55 efd944d6-2f99-4ab2-a7d0-613e5d75939a default }" containerID=e2b65b41ee72ee819a50911bcd0111daa4b50c2d55bead5f51962cc0002976a0 datapathConfiguration="&{false false false false false }" interface=lxc58c5affd0cc2 k8sPodName=local-path-storage/helper-pod-create-pvc-f2ca92ac-d855-4280-ab2a-4fd72b2418db labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2b65b41ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2ca92ac-d855-4280-ab2a-4fd72b2418db subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2b65b41ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2ca92ac-d855-4280-ab2a-4fd72b2418db subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e2b65b41ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identity=2612 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2ca92ac-d855-4280-ab2a-4fd72b2418db oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2b65b41ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identity=2612 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2ca92ac-d855-4280-ab2a-4fd72b2418db subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e2b65b41ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1312 identity=2612 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2ca92ac-d855-4280-ab2a-4fd72b2418db subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2b65b41ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1312 identity=2612 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2ca92ac-d855-4280-ab2a-4fd72b2418db subsys=daemon level=info msg="Delete endpoint request" containerID=5aa76a06e2 endpointID=2047 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-66p4k subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=8db5d6af-0047-4e5f-8710-b38aa897207e k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=8db5d6af-0047-4e5f-8710-b38aa897207e k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=5aa76a06e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2047 identity=58704 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-66p4k subsys=endpoint level=info msg="Delete endpoint request" containerID=02c703452f endpointID=2690 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f0ea4d3b-a019-4a4d-9e5a-aa2df0107227 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=02c703452f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2690 identity=2612 ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0ea4d3b-a019-4a4d-9e5a-aa2df0107227 subsys=endpoint level=info msg="Delete endpoint request" containerID=e2b65b41ee endpointID=1312 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f2ca92ac-d855-4280-ab2a-4fd72b2418db subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e2b65b41ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1312 identity=2612 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2ca92ac-d855-4280-ab2a-4fd72b2418db subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 ede4c52c-1ea8-47d1-b7ea-e7d1ed3b7a46 default }" containerID=d91e77c085c4331990c58934fbc752e549fca13378b10b6b5b9f5254968e3bd6 datapathConfiguration="&{false false false false false }" interface=lxcfe86e40981d2 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d91e77c085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d91e77c085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d91e77c085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d91e77c085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=2372 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d91e77c085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=2372 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d91e77c085 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=279 identity=2372 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d91e77c085 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=279 identity=2372 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.199 a5a4b6b7-924a-4969-8f71-0b1ea82be293 default }" containerID=0d8e40a632dcc9e3537b8191f12cea95d82b002be56474f7092dd31c310c929e datapathConfiguration="&{false false false false false }" interface=lxc4794fa987dd4 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d8e40a632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2979 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d8e40a632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2979 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d8e40a632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2979 identity=16009 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d8e40a632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2979 identity=16009 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d8e40a632 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2979 identity=16009 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d8e40a632 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2979 identity=16009 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.126 a41e3d67-33c3-4ce4-9fec-ff9a606a9b89 default }" containerID=73e2237e3c57943449b5b5795312da8e044c9260682659509ecf87c7048aa710 datapathConfiguration="&{false false false false false }" interface=lxca609bfa2933b k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73e2237e3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1429 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73e2237e3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1429 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73e2237e3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1429 identity=4731 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73e2237e3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1429 identity=4731 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 b2d4e4f7-6bcb-4f89-8d5a-a91eb1234b51 default }" containerID=fbb661ee713fd7bd4242c87d3e376b6bdb0e69bb95627e537e473d1d45c55a7d datapathConfiguration="&{false false false false false }" interface=lxc1229b720d0c6 k8sPodName=local-path-storage/helper-pod-create-pvc-2537bd48-483e-4ec5-92bb-0f69a56c814e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbb661ee71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1765 ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2537bd48-483e-4ec5-92bb-0f69a56c814e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbb661ee71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1765 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2537bd48-483e-4ec5-92bb-0f69a56c814e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fbb661ee71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1765 identity=2612 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2537bd48-483e-4ec5-92bb-0f69a56c814e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fbb661ee71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1765 identity=2612 ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2537bd48-483e-4ec5-92bb-0f69a56c814e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73e2237e3c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1429 identity=4731 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=73e2237e3c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1429 identity=4731 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fbb661ee71 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1765 identity=2612 ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2537bd48-483e-4ec5-92bb-0f69a56c814e subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbb661ee71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1765 identity=2612 ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2537bd48-483e-4ec5-92bb-0f69a56c814e subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.77 dff9da73-dcd7-4295-9304-fcae537debfc default }" containerID=7924193d5f2fede22d88672508b6f1c15f790c4afa3bac1c527266212f7c659d datapathConfiguration="&{false false false false false }" interface=lxcf255eb6a42c0 k8sPodName=monitoring/loki-gateway-cf54cb88c-2k6zl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7924193d5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2838 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-2k6zl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7924193d5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2838 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-2k6zl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7924193d5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2838 identity=59009 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-2k6zl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7924193d5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2838 identity=59009 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-2k6zl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 c6f156af-660d-4067-8dbd-3426a4b1ce8c default }" containerID=b5e5287c526e8885d611d170776caef0c8f2e3e0f6dca72a55b5169f5ebebf51 datapathConfiguration="&{false false false false false }" interface=lxc59c62f7c90e9 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5e5287c52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5e5287c52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5e5287c52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identity=11919 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5e5287c52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identity=11919 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7924193d5f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2838 identity=59009 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-2k6zl subsys=endpoint level=info msg="Successful endpoint creation" containerID=7924193d5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2838 identity=59009 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-2k6zl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b5e5287c52 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=480 identity=11919 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5e5287c52 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=480 identity=11919 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.254 66fbe8b1-52bf-43a4-9b7b-25b5c0d060e4 default }" containerID=ce2f23fdaceb232d884cdaba191c0bacb2cc296ba4dd8851178713e1dd330759 datapathConfiguration="&{false false false false false }" interface=lxc0ebd56e34526 k8sPodName=monitoring/vector-nwd9t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce2f23fdac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/vector-nwd9t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce2f23fdac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/vector-nwd9t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ce2f23fdac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/vector-nwd9t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce2f23fdac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 identity=56737 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/vector-nwd9t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce2f23fdac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 identity=56737 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/vector-nwd9t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce2f23fdac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1957 identity=56737 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/vector-nwd9t subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce2f23fdac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1957 identity=56737 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/vector-nwd9t subsys=daemon level=info msg="Delete endpoint request" containerID=fbb661ee71 endpointID=1765 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2537bd48-483e-4ec5-92bb-0f69a56c814e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fbb661ee71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1765 identity=2612 ipv4=10.0.0.165 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2537bd48-483e-4ec5-92bb-0f69a56c814e subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.234 32bf0e55-557e-42c0-9bf3-41c4f2798fa4 default }" containerID=d97560e6cb22d8b6756a4ee2a508519fb3a6ea62510178c2c49538bcd39a63ba datapathConfiguration="&{false false false false false }" interface=lxc6a1a01e21114 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d97560e6cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d97560e6cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d97560e6cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d97560e6cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identity=55526 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d97560e6cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identity=55526 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d97560e6cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=972 identity=55526 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d97560e6cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=972 identity=55526 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.159 30038e4a-4888-45b3-8e9e-f50b7dae4205 default }" containerID=34deb9bdcf45337feea385aebbed3b3c685418e9775825d5e384c49c09948028 datapathConfiguration="&{false false false false false }" interface=lxc480a03079019 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-g9mzc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34deb9bdcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-g9mzc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34deb9bdcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-g9mzc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34deb9bdcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 identity=16787 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-g9mzc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34deb9bdcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 identity=16787 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-g9mzc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=34deb9bdcf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2139 identity=16787 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-g9mzc subsys=endpoint level=info msg="Successful endpoint creation" containerID=34deb9bdcf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2139 identity=16787 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-g9mzc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.156 805e7386-b3bd-432b-8a22-cb210e1c81be default }" containerID=516002ccba5f999bfaca1dd34e0a4acbe26db57e5ff825ced8a2d094a6206678 datapathConfiguration="&{false false false false false }" interface=lxc540bb3e7956f k8sPodName=openstack/memcached-memcached-6479589586-tvnpg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=516002ccba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tvnpg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=516002ccba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tvnpg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=516002ccba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identity=44029 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tvnpg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=516002ccba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identity=44029 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tvnpg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=516002ccba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=253 identity=44029 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tvnpg subsys=endpoint level=info msg="Successful endpoint creation" containerID=516002ccba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=253 identity=44029 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tvnpg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.59 ad35b820-b14c-4042-8d04-b5c3d9dec290 default }" containerID=408a64c80b286ae1a9a9e69942f40fd276560bdd2a059f7874de1f6497426579 datapathConfiguration="&{false false false false false }" interface=lxc9b4bc244f238 k8sPodName=local-path-storage/helper-pod-create-pvc-23a3f6a5-5fbc-47c4-9c90-8c33d7ecfc61 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=408a64c80b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23a3f6a5-5fbc-47c4-9c90-8c33d7ecfc61 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=408a64c80b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23a3f6a5-5fbc-47c4-9c90-8c33d7ecfc61 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=408a64c80b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identity=2612 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23a3f6a5-5fbc-47c4-9c90-8c33d7ecfc61 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=408a64c80b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identity=2612 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23a3f6a5-5fbc-47c4-9c90-8c33d7ecfc61 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=408a64c80b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=170 identity=2612 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23a3f6a5-5fbc-47c4-9c90-8c33d7ecfc61 subsys=endpoint level=info msg="Successful endpoint creation" containerID=408a64c80b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=170 identity=2612 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23a3f6a5-5fbc-47c4-9c90-8c33d7ecfc61 subsys=daemon level=info msg="Delete endpoint request" containerID=408a64c80b endpointID=170 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-23a3f6a5-5fbc-47c4-9c90-8c33d7ecfc61 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=408a64c80b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=170 identity=2612 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23a3f6a5-5fbc-47c4-9c90-8c33d7ecfc61 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 bde10aff-42ec-4a2d-84c2-62671b31586d default }" containerID=23b7388e081393af5f9fae01a4e43caa12dbae25d9de2d8de179051039f8042f datapathConfiguration="&{false false false false false }" interface=lxcc77488eef486 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23b7388e08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23b7388e08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23b7388e08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identity=61855 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=23b7388e08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identity=61855 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23b7388e08 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=565 identity=61855 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=23b7388e08 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=565 identity=61855 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.248 fcc22bd9-bfc2-4bc7-b243-1a54af97ba55 default }" containerID=f7536cd30a31d289d21c0386044a7e316299dd7d3eecc9d569763282a95fac07 datapathConfiguration="&{false false false false false }" interface=lxcc87be830cb0b k8sPodName=openstack/keystone-api-6bc975bb9f-l2rrg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7536cd30a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-api-6bc975bb9f-l2rrg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7536cd30a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-api-6bc975bb9f-l2rrg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7536cd30a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identity=26317 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-api-6bc975bb9f-l2rrg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7536cd30a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identity=26317 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-api-6bc975bb9f-l2rrg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.250 bc6cf35a-7ed8-4707-980c-d9728e45beae default }" containerID=2eb356042b556ebfafd6d630c08b1e3e70d66ac76e128f11fa86be23114db7fa datapathConfiguration="&{false false false false false }" interface=lxc47cd675bb34b k8sPodName=openstack/keystone-credential-setup-pbkrs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2eb356042b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-credential-setup-pbkrs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2eb356042b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a1f6ac7a-0040-40fa-8c57-81ae2a0c6488,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=a1f6ac7a-0040-40fa-8c57-81ae2a0c6488,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-credential-setup-pbkrs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a1f6ac7a-0040-40fa-8c57-81ae2a0c6488;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=a1f6ac7a-0040-40fa-8c57-81ae2a0c6488;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2eb356042b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identity=1478 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a1f6ac7a-0040-40fa-8c57-81ae2a0c6488,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=a1f6ac7a-0040-40fa-8c57-81ae2a0c6488,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-credential-setup-pbkrs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2eb356042b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identity=1478 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-credential-setup-pbkrs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7536cd30a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=117 identity=26317 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-api-6bc975bb9f-l2rrg subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7536cd30a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=117 identity=26317 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-api-6bc975bb9f-l2rrg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2eb356042b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=207 identity=1478 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-credential-setup-pbkrs subsys=endpoint level=info msg="Successful endpoint creation" containerID=2eb356042b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=207 identity=1478 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-credential-setup-pbkrs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2eb356042b endpointID=207 k8sNamespace=openstack k8sPodName=keystone-credential-setup-pbkrs subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a1f6ac7a-0040-40fa-8c57-81ae2a0c6488 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=a1f6ac7a-0040-40fa-8c57-81ae2a0c6488 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2eb356042b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=207 identity=1478 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-credential-setup-pbkrs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 a9d5a7b8-ab6c-45c5-9912-dd792b7b56d6 default }" containerID=9624bbc293089e12149097e2f6d01b2b204cb43d943dc7430f09d2bff0562bf2 datapathConfiguration="&{false false false false false }" interface=lxc934525f890a4 k8sPodName=openstack/keystone-db-init-sjljc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9624bbc293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1199 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-init-sjljc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9624bbc293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1199 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b96ed04e-4520-42b6-85c9-5957537e7800,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=b96ed04e-4520-42b6-85c9-5957537e7800,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-init-sjljc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9624bbc293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1199 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-init-sjljc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b96ed04e-4520-42b6-85c9-5957537e7800;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=b96ed04e-4520-42b6-85c9-5957537e7800;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9624bbc293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1199 identity=40088 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b96ed04e-4520-42b6-85c9-5957537e7800,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=b96ed04e-4520-42b6-85c9-5957537e7800,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-init-sjljc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9624bbc293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1199 identity=40088 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-init-sjljc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9624bbc293 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1199 identity=40088 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-init-sjljc subsys=endpoint level=info msg="Successful endpoint creation" containerID=9624bbc293 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1199 identity=40088 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-init-sjljc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9624bbc293 endpointID=1199 k8sNamespace=openstack k8sPodName=keystone-db-init-sjljc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b96ed04e-4520-42b6-85c9-5957537e7800 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=b96ed04e-4520-42b6-85c9-5957537e7800 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9624bbc293 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1199 identity=40088 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-init-sjljc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 c78dc872-3977-4516-910c-be16905af7d5 default }" containerID=98e6e0431e6df734bf1fa904e863d1945552d0ee733aab2020ec9ee776f5d144 datapathConfiguration="&{false false false false false }" interface=lxc0df68697a5a1 k8sPodName=openstack/keystone-fernet-setup-bvc9r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98e6e0431e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-fernet-setup-bvc9r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98e6e0431e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=57db727a-def5-4669-b7f2-98256a3b2a92,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=57db727a-def5-4669-b7f2-98256a3b2a92,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-fernet-setup-bvc9r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=57db727a-def5-4669-b7f2-98256a3b2a92;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=57db727a-def5-4669-b7f2-98256a3b2a92;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98e6e0431e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 identity=47142 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=57db727a-def5-4669-b7f2-98256a3b2a92,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=57db727a-def5-4669-b7f2-98256a3b2a92,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-fernet-setup-bvc9r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98e6e0431e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 identity=47142 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-fernet-setup-bvc9r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=98e6e0431e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=177 identity=47142 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-fernet-setup-bvc9r subsys=endpoint level=info msg="Successful endpoint creation" containerID=98e6e0431e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=177 identity=47142 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-fernet-setup-bvc9r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=98e6e0431e endpointID=177 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-bvc9r subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=57db727a-def5-4669-b7f2-98256a3b2a92 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=57db727a-def5-4669-b7f2-98256a3b2a92 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=98e6e0431e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=177 identity=47142 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-fernet-setup-bvc9r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 9665ff54-67ae-4abd-9771-0cc0532bae18 default }" containerID=cfdb705b6df39e2bd2bb294edc7e390d16f02b0192e8843ccd448820f144bd34 datapathConfiguration="&{false false false false false }" interface=lxcddc2f1654709 k8sPodName=openstack/keystone-db-sync-sh65v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cfdb705b6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-db-sync-sh65v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cfdb705b6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0e22c345-1473-4ef1-9d7c-11fae5027dc1,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=0e22c345-1473-4ef1-9d7c-11fae5027dc1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-db-sync-sh65v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cfdb705b6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-db-sync-sh65v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0e22c345-1473-4ef1-9d7c-11fae5027dc1;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=0e22c345-1473-4ef1-9d7c-11fae5027dc1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cfdb705b6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 identity=61561 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0e22c345-1473-4ef1-9d7c-11fae5027dc1,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=0e22c345-1473-4ef1-9d7c-11fae5027dc1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-db-sync-sh65v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cfdb705b6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 identity=61561 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-db-sync-sh65v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cfdb705b6d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=149 identity=61561 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-db-sync-sh65v subsys=endpoint level=info msg="Successful endpoint creation" containerID=cfdb705b6d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=149 identity=61561 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-db-sync-sh65v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cfdb705b6d endpointID=149 k8sNamespace=openstack k8sPodName=keystone-db-sync-sh65v subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0e22c345-1473-4ef1-9d7c-11fae5027dc1 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=0e22c345-1473-4ef1-9d7c-11fae5027dc1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=cfdb705b6d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=149 identity=61561 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-db-sync-sh65v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 5ae373d2-69cb-4ea2-9577-163e07b3b4f2 default }" containerID=22614c6dd2d1b8b8d4ca6b31b31d40bf0a2acf91a4dbfc821ee8d83491ad6015 datapathConfiguration="&{false false false false false }" interface=lxcb4f64c32c1a2 k8sPodName=openstack/keystone-rabbit-init-qt9j7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22614c6dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-rabbit-init-qt9j7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22614c6dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7fa57ffb-a06a-462a-ae8a-7ec2196fd77a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7fa57ffb-a06a-462a-ae8a-7ec2196fd77a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-rabbit-init-qt9j7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7fa57ffb-a06a-462a-ae8a-7ec2196fd77a;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=7fa57ffb-a06a-462a-ae8a-7ec2196fd77a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=22614c6dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 identity=55210 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7fa57ffb-a06a-462a-ae8a-7ec2196fd77a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7fa57ffb-a06a-462a-ae8a-7ec2196fd77a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-rabbit-init-qt9j7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22614c6dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 identity=55210 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-rabbit-init-qt9j7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22614c6dd2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=696 identity=55210 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-rabbit-init-qt9j7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=22614c6dd2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=696 identity=55210 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-rabbit-init-qt9j7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=22614c6dd2 endpointID=696 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-qt9j7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7fa57ffb-a06a-462a-ae8a-7ec2196fd77a k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=7fa57ffb-a06a-462a-ae8a-7ec2196fd77a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=22614c6dd2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=696 identity=55210 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-rabbit-init-qt9j7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 28a7f991-3920-44af-9f96-21510a10f349 default }" containerID=19e5c1b0dd71a0f5145dbd5d748ba3c4b2ca9030807800029f77c727ae188220 datapathConfiguration="&{false false false false false }" interface=lxc5b21384996d0 k8sPodName=openstack/keystone-domain-manage-2vt4f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19e5c1b0dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=611 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-2vt4f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19e5c1b0dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=611 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=df9c775a-10ec-40cb-848d-6abff5bc39a7,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=df9c775a-10ec-40cb-848d-6abff5bc39a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-2vt4f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=df9c775a-10ec-40cb-848d-6abff5bc39a7;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=df9c775a-10ec-40cb-848d-6abff5bc39a7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=19e5c1b0dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=611 identity=49722 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=df9c775a-10ec-40cb-848d-6abff5bc39a7,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=df9c775a-10ec-40cb-848d-6abff5bc39a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-2vt4f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19e5c1b0dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=611 identity=49722 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-2vt4f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19e5c1b0dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=611 identity=49722 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-2vt4f subsys=endpoint level=info msg="Successful endpoint creation" containerID=19e5c1b0dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=611 identity=49722 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-2vt4f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=19e5c1b0dd endpointID=611 k8sNamespace=openstack k8sPodName=keystone-domain-manage-2vt4f subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=df9c775a-10ec-40cb-848d-6abff5bc39a7 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=df9c775a-10ec-40cb-848d-6abff5bc39a7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=19e5c1b0dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=611 identity=49722 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-2vt4f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 60cf4bbd-ffd7-4f5d-ad2a-23e5a1824506 default }" containerID=560b462ae72916e65efff5a3cb784f73527f1b1177e74a29e9dfcc304319e906 datapathConfiguration="&{false false false false false }" interface=lxc7ae2d5a24fdf k8sPodName=openstack/keystone-bootstrap-b7grk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=560b462ae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1751 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-bootstrap-b7grk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=560b462ae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1751 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7a354da1-02b4-4e4c-88e6-9558da3732bc,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=7a354da1-02b4-4e4c-88e6-9558da3732bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-bootstrap-b7grk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7a354da1-02b4-4e4c-88e6-9558da3732bc;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=7a354da1-02b4-4e4c-88e6-9558da3732bc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=560b462ae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1751 identity=42081 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7a354da1-02b4-4e4c-88e6-9558da3732bc,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=7a354da1-02b4-4e4c-88e6-9558da3732bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-bootstrap-b7grk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=560b462ae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1751 identity=42081 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-bootstrap-b7grk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=560b462ae7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1751 identity=42081 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-bootstrap-b7grk subsys=endpoint level=info msg="Successful endpoint creation" containerID=560b462ae7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1751 identity=42081 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-bootstrap-b7grk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=560b462ae7 endpointID=1751 k8sNamespace=openstack k8sPodName=keystone-bootstrap-b7grk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7a354da1-02b4-4e4c-88e6-9558da3732bc k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=7a354da1-02b4-4e4c-88e6-9558da3732bc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=560b462ae7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1751 identity=42081 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-bootstrap-b7grk subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03443261595898657 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.225 5ac445bb-ab75-4fd9-8b7c-d42aa66ea8ce default }" containerID=f2f08ddc06aa38a76e8c26b1d510c3d0ef9a7d4854767ed6c9c3dcdc61385c3a datapathConfiguration="&{false false false false false }" interface=lxcf1298d95f8e2 k8sPodName=local-path-storage/helper-pod-create-pvc-40890df8-4d16-44e8-a59d-2f71e8b50a20 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2f08ddc06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3431 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40890df8-4d16-44e8-a59d-2f71e8b50a20 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2f08ddc06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3431 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40890df8-4d16-44e8-a59d-2f71e8b50a20 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2f08ddc06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3431 identity=2612 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40890df8-4d16-44e8-a59d-2f71e8b50a20 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2f08ddc06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3431 identity=2612 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40890df8-4d16-44e8-a59d-2f71e8b50a20 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2f08ddc06 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3431 identity=2612 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40890df8-4d16-44e8-a59d-2f71e8b50a20 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2f08ddc06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3431 identity=2612 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40890df8-4d16-44e8-a59d-2f71e8b50a20 subsys=daemon level=info msg="Delete endpoint request" containerID=f2f08ddc06 endpointID=3431 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-40890df8-4d16-44e8-a59d-2f71e8b50a20 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f2f08ddc06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3431 identity=2612 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40890df8-4d16-44e8-a59d-2f71e8b50a20 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 3c0758e4-3437-4e1e-bc70-11c20346589e default }" containerID=dda7fd3e2b720e844580406ad1b78143f4a8ed50b24c927e094095ab8ea41dcd datapathConfiguration="&{false false false false false }" interface=lxcac7333a67a2e k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dda7fd3e2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2872 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dda7fd3e2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2872 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dda7fd3e2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2872 identity=11886 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dda7fd3e2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2872 identity=11886 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dda7fd3e2b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2872 identity=11886 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dda7fd3e2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2872 identity=11886 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.242 4ab33283-ae9e-4996-a9c5-6f543a53a9de default }" containerID=bc2902c0e46946333960d0e6ed6e589f4be50200586e8c7e6696b9aa7725b445 datapathConfiguration="&{false false false false false }" interface=lxcfde652ccd1b7 k8sPodName=openstack/barbican-api-68c4f7cb9f-cwqjv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc2902c0e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3084 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-api-68c4f7cb9f-cwqjv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc2902c0e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3084 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-api-68c4f7cb9f-cwqjv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=bc2902c0e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3084 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-api-68c4f7cb9f-cwqjv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bc2902c0e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3084 identity=10673 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-api-68c4f7cb9f-cwqjv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc2902c0e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3084 identity=10673 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-api-68c4f7cb9f-cwqjv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 1781950b-153d-40e2-9d19-734e497c7d87 default }" containerID=b92287a6701cf04c99d6faddc9c085e519af2918350ee3a514faa2af957f4760 datapathConfiguration="&{false false false false false }" interface=lxc918e00ff8e50 k8sPodName=openstack/barbican-db-init-cw8qf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b92287a670 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=497 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/barbican-db-init-cw8qf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b92287a670 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=497 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c2b9bbf9-9238-478a-8ff3-3e2802e5a963,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=c2b9bbf9-9238-478a-8ff3-3e2802e5a963,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/barbican-db-init-cw8qf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c2b9bbf9-9238-478a-8ff3-3e2802e5a963;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=c2b9bbf9-9238-478a-8ff3-3e2802e5a963;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b92287a670 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=497 identity=9766 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c2b9bbf9-9238-478a-8ff3-3e2802e5a963,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=c2b9bbf9-9238-478a-8ff3-3e2802e5a963,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/barbican-db-init-cw8qf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b92287a670 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=497 identity=9766 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/barbican-db-init-cw8qf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc2902c0e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3084 identity=10673 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-api-68c4f7cb9f-cwqjv subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc2902c0e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3084 identity=10673 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-api-68c4f7cb9f-cwqjv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b92287a670 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=497 identity=9766 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/barbican-db-init-cw8qf subsys=endpoint level=info msg="Successful endpoint creation" containerID=b92287a670 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=497 identity=9766 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/barbican-db-init-cw8qf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b92287a670 endpointID=497 k8sNamespace=openstack k8sPodName=barbican-db-init-cw8qf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c2b9bbf9-9238-478a-8ff3-3e2802e5a963 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=c2b9bbf9-9238-478a-8ff3-3e2802e5a963 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b92287a670 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=497 identity=9766 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/barbican-db-init-cw8qf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 229744c8-33bd-43a1-8859-8333a3ff692e default }" containerID=b0962056d298ef391a7d2bc65e0c45ca93e1c420da261a81e4ae7ea3b8475d2b datapathConfiguration="&{false false false false false }" interface=lxc46d1fed3cd09 k8sPodName=openstack/barbican-db-sync-l4ckm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0962056d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3725 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-sync-l4ckm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0962056d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3725 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=dd842361-2126-42ee-95fd-6f44fe3182f7,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=dd842361-2126-42ee-95fd-6f44fe3182f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-sync-l4ckm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=dd842361-2126-42ee-95fd-6f44fe3182f7;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=dd842361-2126-42ee-95fd-6f44fe3182f7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0962056d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3725 identity=41248 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=dd842361-2126-42ee-95fd-6f44fe3182f7,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=dd842361-2126-42ee-95fd-6f44fe3182f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-sync-l4ckm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b0962056d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3725 identity=41248 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-sync-l4ckm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0962056d2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3725 identity=41248 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-sync-l4ckm subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0962056d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3725 identity=41248 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-sync-l4ckm subsys=daemon level=info msg="Delete endpoint request" containerID=b0962056d2 endpointID=3725 k8sNamespace=openstack k8sPodName=barbican-db-sync-l4ckm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=dd842361-2126-42ee-95fd-6f44fe3182f7 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=dd842361-2126-42ee-95fd-6f44fe3182f7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b0962056d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3725 identity=41248 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-sync-l4ckm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 daddae69-2297-45c8-b168-4e25c48ea0a3 default }" containerID=d3164f0405a58c869b0d1ddf7649592b510caac69ce31133561e9234ad373122 datapathConfiguration="&{false false false false false }" interface=lxcdba8c9113996 k8sPodName=openstack/barbican-rabbit-init-mqmcf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3164f0405 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3677 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqmcf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3164f0405 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3677 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1f60a9e2-fec3-4b52-9b34-6da8d47a2716,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1f60a9e2-fec3-4b52-9b34-6da8d47a2716,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqmcf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1f60a9e2-fec3-4b52-9b34-6da8d47a2716;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1f60a9e2-fec3-4b52-9b34-6da8d47a2716;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d3164f0405 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3677 identity=22489 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1f60a9e2-fec3-4b52-9b34-6da8d47a2716,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1f60a9e2-fec3-4b52-9b34-6da8d47a2716,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqmcf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d3164f0405 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3677 identity=22489 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqmcf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d3164f0405 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3677 identity=22489 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqmcf subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3164f0405 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3677 identity=22489 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqmcf subsys=daemon level=info msg="Delete endpoint request" containerID=d3164f0405 endpointID=3677 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-mqmcf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1f60a9e2-fec3-4b52-9b34-6da8d47a2716 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1f60a9e2-fec3-4b52-9b34-6da8d47a2716 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d3164f0405 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3677 identity=22489 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqmcf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 1ba2223f-e269-4f42-9a3d-1520011148ca default }" containerID=3c172010f4f53a8662f6a39d29d0223d2af75c45e03567a5bb47963eb99877ee datapathConfiguration="&{false false false false false }" interface=lxc976e126be9c9 k8sPodName=openstack/barbican-ks-service-qt82s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c172010f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-service-qt82s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c172010f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b375d36d-4c2f-4728-801f-ecb81948fbae,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=b375d36d-4c2f-4728-801f-ecb81948fbae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-service-qt82s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b375d36d-4c2f-4728-801f-ecb81948fbae;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=b375d36d-4c2f-4728-801f-ecb81948fbae;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c172010f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identity=11134 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b375d36d-4c2f-4728-801f-ecb81948fbae,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=b375d36d-4c2f-4728-801f-ecb81948fbae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-service-qt82s oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3c172010f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identity=11134 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-service-qt82s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c172010f4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1767 identity=11134 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-service-qt82s subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c172010f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1767 identity=11134 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-service-qt82s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3c172010f4 endpointID=1767 k8sNamespace=openstack k8sPodName=barbican-ks-service-qt82s subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b375d36d-4c2f-4728-801f-ecb81948fbae k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=b375d36d-4c2f-4728-801f-ecb81948fbae k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3c172010f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1767 identity=11134 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/barbican-ks-service-qt82s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 2d7cda0f-f962-4d0c-8ae3-396d52d8c562 default }" containerID=5853fa0df811e4554a2ee191597bb6981354ad56e9ec777a8c58d1241dcd0f58 datapathConfiguration="&{false false false false false }" interface=lxc1ac4448751bf k8sPodName=openstack/barbican-ks-endpoints-l2kr5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5853fa0df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=12 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l2kr5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5853fa0df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=12 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a2db7386-6735-40a9-86af-e0d4fe3e55ab,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a2db7386-6735-40a9-86af-e0d4fe3e55ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l2kr5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5853fa0df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=12 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l2kr5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a2db7386-6735-40a9-86af-e0d4fe3e55ab;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=a2db7386-6735-40a9-86af-e0d4fe3e55ab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5853fa0df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=12 identity=45206 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a2db7386-6735-40a9-86af-e0d4fe3e55ab,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a2db7386-6735-40a9-86af-e0d4fe3e55ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l2kr5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5853fa0df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=12 identity=45206 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l2kr5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5853fa0df8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=12 identity=45206 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l2kr5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5853fa0df8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=12 identity=45206 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l2kr5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5853fa0df8 endpointID=12 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-l2kr5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a2db7386-6735-40a9-86af-e0d4fe3e55ab k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=a2db7386-6735-40a9-86af-e0d4fe3e55ab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5853fa0df8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=12 identity=45206 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l2kr5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 3f8bf6e0-a0a0-4175-b379-03a16aa7fbee default }" containerID=06fe9945cfd666e00c6b0e244e7dbaaa0b39a7e89cb8d87f221089efa1f44d98 datapathConfiguration="&{false false false false false }" interface=lxc7d55eae08050 k8sPodName=openstack/barbican-ks-user-xcf8r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06fe9945cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1476 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-user-xcf8r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06fe9945cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1476 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=22b2dc91-6d1d-480e-a3e4-d35c9af4382b,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=22b2dc91-6d1d-480e-a3e4-d35c9af4382b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-user-xcf8r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=22b2dc91-6d1d-480e-a3e4-d35c9af4382b;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=22b2dc91-6d1d-480e-a3e4-d35c9af4382b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06fe9945cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1476 identity=6298 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=22b2dc91-6d1d-480e-a3e4-d35c9af4382b,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=22b2dc91-6d1d-480e-a3e4-d35c9af4382b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-user-xcf8r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06fe9945cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1476 identity=6298 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-user-xcf8r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=06fe9945cf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1476 identity=6298 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-user-xcf8r subsys=endpoint level=info msg="Successful endpoint creation" containerID=06fe9945cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1476 identity=6298 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-user-xcf8r subsys=daemon level=info msg="Delete endpoint request" containerID=06fe9945cf endpointID=1476 k8sNamespace=openstack k8sPodName=barbican-ks-user-xcf8r subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=22b2dc91-6d1d-480e-a3e4-d35c9af4382b k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=22b2dc91-6d1d-480e-a3e4-d35c9af4382b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=06fe9945cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1476 identity=6298 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-user-xcf8r subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.6 8655e6cd-99cc-4e49-abf4-2d48b1cc604f default }" containerID=76ca25d57b9469757d3256237a94d05167234e7482831fea29c26cb23fe0b2aa datapathConfiguration="&{false false false false false }" interface=lxc97b6e7b7db99 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zp76l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76ca25d57b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 ipv4=10.0.0.6 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zp76l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76ca25d57b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.6 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zp76l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76ca25d57b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 identity=9213 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.6 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zp76l oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=76ca25d57b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3244 identity=9213 ipv4=10.0.0.6 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zp76l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76ca25d57b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3244 identity=9213 ipv4=10.0.0.6 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zp76l subsys=endpoint level=info msg="Successful endpoint creation" containerID=76ca25d57b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3244 identity=9213 ipv4=10.0.0.6 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zp76l subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.2 a1bb1933-53fc-4cdb-80a7-101ba72f1b98 default }" containerID=388c9bcc6b4c63e6af79f3e693ff2c2ca3a1f461a6a0ce6ed8634a595b534eeb datapathConfiguration="&{false false false false false }" interface=lxc71c92761824a k8sPodName=openstack/rook-ceph-detect-version-89rpc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=388c9bcc6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-detect-version-89rpc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=388c9bcc6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=fe448219-56d4-4613-bc51-7c1802a01dcb,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=fe448219-56d4-4613-bc51-7c1802a01dcb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-detect-version-89rpc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=fe448219-56d4-4613-bc51-7c1802a01dcb;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=fe448219-56d4-4613-bc51-7c1802a01dcb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=388c9bcc6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identity=13366 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=fe448219-56d4-4613-bc51-7c1802a01dcb,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=fe448219-56d4-4613-bc51-7c1802a01dcb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-detect-version-89rpc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=388c9bcc6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identity=13366 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-detect-version-89rpc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=388c9bcc6b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=262 identity=13366 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-detect-version-89rpc subsys=endpoint level=info msg="Successful endpoint creation" containerID=388c9bcc6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=262 identity=13366 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-detect-version-89rpc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=388c9bcc6b endpointID=262 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-89rpc subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=fe448219-56d4-4613-bc51-7c1802a01dcb k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=fe448219-56d4-4613-bc51-7c1802a01dcb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=388c9bcc6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=262 identity=13366 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-detect-version-89rpc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 cd718450-70c4-4970-ae09-4857b488fda5 default }" containerID=5548ae2b9601d9d5159cb0771bc1bb652475cd4a85f85e28dace5173154ef744 datapathConfiguration="&{false false false false false }" interface=lxc4e3cc949284f k8sPodName=openstack/ceph-object-controller-detect-version-xrwt5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5548ae2b96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3508 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xrwt5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5548ae2b96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3508 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=21e4c8b9-516f-42b1-a1cf-02eab435b239,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=21e4c8b9-516f-42b1-a1cf-02eab435b239,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xrwt5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=21e4c8b9-516f-42b1-a1cf-02eab435b239;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=21e4c8b9-516f-42b1-a1cf-02eab435b239;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5548ae2b96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3508 identity=24356 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=21e4c8b9-516f-42b1-a1cf-02eab435b239,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=21e4c8b9-516f-42b1-a1cf-02eab435b239,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xrwt5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5548ae2b96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3508 identity=24356 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xrwt5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5548ae2b96 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3508 identity=24356 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xrwt5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5548ae2b96 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3508 identity=24356 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xrwt5 subsys=daemon level=info msg="Delete endpoint request" containerID=5548ae2b96 endpointID=3508 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-xrwt5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=21e4c8b9-516f-42b1-a1cf-02eab435b239 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=21e4c8b9-516f-42b1-a1cf-02eab435b239 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=5548ae2b96 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3508 identity=24356 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xrwt5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 8742010f-b946-4304-b5d2-4cf96bf82afe default }" containerID=38f3a2ceee4800938557be54a4e4fbbcc4c31d769abc038333ba2ce03d153296 datapathConfiguration="&{false false false false false }" interface=lxc54620fde855f k8sPodName=local-path-storage/helper-pod-create-pvc-ff8f899a-1538-42dd-98e1-ab22e3fce535 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38f3a2ceee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff8f899a-1538-42dd-98e1-ab22e3fce535 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38f3a2ceee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff8f899a-1538-42dd-98e1-ab22e3fce535 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38f3a2ceee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identity=2612 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff8f899a-1538-42dd-98e1-ab22e3fce535 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38f3a2ceee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identity=2612 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff8f899a-1538-42dd-98e1-ab22e3fce535 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38f3a2ceee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=514 identity=2612 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff8f899a-1538-42dd-98e1-ab22e3fce535 subsys=endpoint level=info msg="Successful endpoint creation" containerID=38f3a2ceee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=514 identity=2612 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff8f899a-1538-42dd-98e1-ab22e3fce535 subsys=daemon level=info msg="Delete endpoint request" containerID=38f3a2ceee endpointID=514 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ff8f899a-1538-42dd-98e1-ab22e3fce535 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=38f3a2ceee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=514 identity=2612 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff8f899a-1538-42dd-98e1-ab22e3fce535 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 d51cd42c-8477-4fbd-bb4d-63c088c22558 default }" containerID=c41c850286eb6a9a1aaec801f683789c9dbcb3f4c6a25b8591f0cc588fdae587 datapathConfiguration="&{false false false false false }" interface=lxc0e13acbc688a k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c41c850286 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c41c850286 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c41c850286 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c41c850286 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identity=65197 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c41c850286 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identity=65197 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c41c850286 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=107 identity=65197 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c41c850286 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=107 identity=65197 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.50 5b5c37a0-5f77-42e8-8312-e4fb15ac64d2 default }" containerID=ca2d9ac7233cf498830f18bd6612687377225ed8f808eff634d05b13272c9353 datapathConfiguration="&{false false false false false }" interface=lxc2ea6720d71e6 k8sPodName=openstack/glance-db-init-vllnf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca2d9ac723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2151 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/glance-db-init-vllnf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca2d9ac723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2151 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=19cab0fc-ea13-4467-808e-839f64d11209,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=19cab0fc-ea13-4467-808e-839f64d11209,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/glance-db-init-vllnf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=19cab0fc-ea13-4467-808e-839f64d11209;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=19cab0fc-ea13-4467-808e-839f64d11209;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca2d9ac723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2151 identity=39655 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=19cab0fc-ea13-4467-808e-839f64d11209,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=19cab0fc-ea13-4467-808e-839f64d11209,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/glance-db-init-vllnf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca2d9ac723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2151 identity=39655 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/glance-db-init-vllnf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ca2d9ac723 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2151 identity=39655 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/glance-db-init-vllnf subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca2d9ac723 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2151 identity=39655 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/glance-db-init-vllnf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.99 8c106e6c-ffc1-4e4d-8708-6eb6cf11e77a default }" containerID=2c266b7f6fd924b18bc6a2f1187d0b2f29664f0df3f72444ed47c5387e7e7489 datapathConfiguration="&{false false false false false }" interface=lxc94684fc2e086 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ftqnd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c266b7f6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3113 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ftqnd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c266b7f6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3113 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ftqnd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c266b7f6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3113 identity=7825 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ftqnd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c266b7f6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3113 identity=7825 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ftqnd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.35 a3df290b-5bde-45c8-8be0-84421ffe4aef default }" containerID=5d946eac5a6ec455118be5f3817b57110ff006ce92ba5fb4cc58811f8581c741 datapathConfiguration="&{false false false false false }" interface=lxc678984c35e6c k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5gbsb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d946eac5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1972 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5gbsb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d946eac5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1972 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5gbsb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d946eac5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1972 identity=57895 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5gbsb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d946eac5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1972 identity=57895 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5gbsb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c266b7f6f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3113 identity=7825 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ftqnd subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c266b7f6f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3113 identity=7825 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ftqnd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5d946eac5a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1972 identity=57895 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5gbsb subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d946eac5a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1972 identity=57895 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5gbsb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ca2d9ac723 endpointID=2151 k8sNamespace=openstack k8sPodName=glance-db-init-vllnf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=19cab0fc-ea13-4467-808e-839f64d11209 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=19cab0fc-ea13-4467-808e-839f64d11209 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ca2d9ac723 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2151 identity=39655 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/glance-db-init-vllnf subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.217 10af6e4e-5dce-4ce9-ad48-b8d4efc0912d default }" containerID=ba92c68250b1834b87443e8fe3b2a9094cd744fed254314dd9f72f5c09b5e4b7 datapathConfiguration="&{false false false false false }" interface=lxcf4fd6b10c280 k8sPodName=openstack/glance-db-sync-b5x5b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba92c68250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-db-sync-b5x5b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba92c68250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0192b8be-3ecb-4754-99d4-31b074322213,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=0192b8be-3ecb-4754-99d4-31b074322213,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-db-sync-b5x5b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0192b8be-3ecb-4754-99d4-31b074322213;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=0192b8be-3ecb-4754-99d4-31b074322213;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ba92c68250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-db-sync-b5x5b line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ba92c68250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 identity=58476 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0192b8be-3ecb-4754-99d4-31b074322213,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=0192b8be-3ecb-4754-99d4-31b074322213,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-db-sync-b5x5b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba92c68250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 identity=58476 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-db-sync-b5x5b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba92c68250 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1434 identity=58476 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-db-sync-b5x5b subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba92c68250 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1434 identity=58476 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-db-sync-b5x5b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ba92c68250 endpointID=1434 k8sNamespace=openstack k8sPodName=glance-db-sync-b5x5b subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0192b8be-3ecb-4754-99d4-31b074322213 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=0192b8be-3ecb-4754-99d4-31b074322213 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ba92c68250 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1434 identity=58476 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-db-sync-b5x5b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 3a772499-c1a1-447d-92d2-ea3e302f25cd default }" containerID=c187d754c3d06fd3b175f46bee3c71fc8a9b41ebc29d08a722454af6fe811e3e datapathConfiguration="&{false false false false false }" interface=lxce10941d8db74 k8sPodName=openstack/glance-rabbit-init-hsr5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c187d754c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=695 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-rabbit-init-hsr5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c187d754c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=695 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2615a88d-1b3e-4895-9687-ab317ae19a2e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2615a88d-1b3e-4895-9687-ab317ae19a2e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-rabbit-init-hsr5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2615a88d-1b3e-4895-9687-ab317ae19a2e;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2615a88d-1b3e-4895-9687-ab317ae19a2e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c187d754c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=695 identity=47624 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2615a88d-1b3e-4895-9687-ab317ae19a2e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2615a88d-1b3e-4895-9687-ab317ae19a2e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-rabbit-init-hsr5t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c187d754c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=695 identity=47624 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-rabbit-init-hsr5t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c187d754c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=695 identity=47624 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-rabbit-init-hsr5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=c187d754c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=695 identity=47624 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-rabbit-init-hsr5t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c187d754c3 endpointID=695 k8sNamespace=openstack k8sPodName=glance-rabbit-init-hsr5t subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2615a88d-1b3e-4895-9687-ab317ae19a2e k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2615a88d-1b3e-4895-9687-ab317ae19a2e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c187d754c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=695 identity=47624 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-rabbit-init-hsr5t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 0c2f2bbe-6202-476c-9a27-36f45930d2f1 default }" containerID=cfbb47a6318cf065ee14a9187665eabd9623323a5ea0fbfc0d030ec9091ad841 datapathConfiguration="&{false false false false false }" interface=lxc194abdd2eda4 k8sPodName=openstack/glance-ks-service-ttkvc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cfbb47a631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-ks-service-ttkvc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cfbb47a631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9f3584b7-e508-4679-9ac5-0c0a41da7e78,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=9f3584b7-e508-4679-9ac5-0c0a41da7e78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-ks-service-ttkvc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cfbb47a631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-ks-service-ttkvc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9f3584b7-e508-4679-9ac5-0c0a41da7e78;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=9f3584b7-e508-4679-9ac5-0c0a41da7e78;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cfbb47a631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=13214 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9f3584b7-e508-4679-9ac5-0c0a41da7e78,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=9f3584b7-e508-4679-9ac5-0c0a41da7e78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-ks-service-ttkvc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cfbb47a631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=13214 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-ks-service-ttkvc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cfbb47a631 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=35 identity=13214 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-ks-service-ttkvc subsys=endpoint level=info msg="Successful endpoint creation" containerID=cfbb47a631 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=35 identity=13214 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-ks-service-ttkvc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cfbb47a631 endpointID=35 k8sNamespace=openstack k8sPodName=glance-ks-service-ttkvc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9f3584b7-e508-4679-9ac5-0c0a41da7e78 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=9f3584b7-e508-4679-9ac5-0c0a41da7e78 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=cfbb47a631 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=35 identity=13214 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-ks-service-ttkvc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 9aa3da83-ed7b-47bb-a6f5-c2b8170c675a default }" containerID=567c60a82db62fe1b141d87ad640d4ea7449da84001240a2be03f84a889c4d0b datapathConfiguration="&{false false false false false }" interface=lxc3bb6dd10edcf k8sPodName=openstack/glance-ks-endpoints-b7m8c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=567c60a82d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-ks-endpoints-b7m8c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=567c60a82d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=dd23b824-66ec-473c-8c6b-ee2b3159cc5e,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=dd23b824-66ec-473c-8c6b-ee2b3159cc5e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-ks-endpoints-b7m8c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=dd23b824-66ec-473c-8c6b-ee2b3159cc5e;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=dd23b824-66ec-473c-8c6b-ee2b3159cc5e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=567c60a82d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-ks-endpoints-b7m8c line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=567c60a82d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identity=12078 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=dd23b824-66ec-473c-8c6b-ee2b3159cc5e,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=dd23b824-66ec-473c-8c6b-ee2b3159cc5e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-ks-endpoints-b7m8c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=567c60a82d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identity=12078 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-ks-endpoints-b7m8c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=567c60a82d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1246 identity=12078 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-ks-endpoints-b7m8c subsys=endpoint level=info msg="Successful endpoint creation" containerID=567c60a82d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1246 identity=12078 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-ks-endpoints-b7m8c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=567c60a82d endpointID=1246 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-b7m8c subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=dd23b824-66ec-473c-8c6b-ee2b3159cc5e k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=dd23b824-66ec-473c-8c6b-ee2b3159cc5e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=567c60a82d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1246 identity=12078 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-ks-endpoints-b7m8c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 8cbe5330-372a-44d7-8ea9-255d74961cc0 default }" containerID=0c63cd36625ea8dfa10b240dd8f2aeaceea86fbbc9b88d71336909820ab21eda datapathConfiguration="&{false false false false false }" interface=lxced8e4ccf7ad8 k8sPodName=openstack/glance-ks-user-fbngr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c63cd3662 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-user-fbngr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c63cd3662 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9286c3f5-158f-4ea6-ab68-62560f98f3d9,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=9286c3f5-158f-4ea6-ab68-62560f98f3d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-user-fbngr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9286c3f5-158f-4ea6-ab68-62560f98f3d9;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=9286c3f5-158f-4ea6-ab68-62560f98f3d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c63cd3662 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identity=9539 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9286c3f5-158f-4ea6-ab68-62560f98f3d9,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=9286c3f5-158f-4ea6-ab68-62560f98f3d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-user-fbngr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c63cd3662 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identity=9539 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-user-fbngr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0c63cd3662 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=471 identity=9539 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-user-fbngr subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c63cd3662 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=471 identity=9539 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-user-fbngr subsys=daemon level=info msg="Delete endpoint request" containerID=0c63cd3662 endpointID=471 k8sNamespace=openstack k8sPodName=glance-ks-user-fbngr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9286c3f5-158f-4ea6-ab68-62560f98f3d9 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=9286c3f5-158f-4ea6-ab68-62560f98f3d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0c63cd3662 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=471 identity=9539 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-user-fbngr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 ef354b9b-d17c-4334-ab6f-9ceeb2186de0 default }" containerID=2e172bd22e847622bdfd96d1bbe4f9d39750cd4017331068dc94dbad6c5bb2d3 datapathConfiguration="&{false false false false false }" interface=lxcba44efcc77af k8sPodName=openstack/glance-metadefs-load-js4mx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e172bd22e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-metadefs-load-js4mx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e172bd22e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7867b2ff-21a4-4d80-a573-8aa9d9580eb4,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=7867b2ff-21a4-4d80-a573-8aa9d9580eb4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-metadefs-load-js4mx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7867b2ff-21a4-4d80-a573-8aa9d9580eb4;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=7867b2ff-21a4-4d80-a573-8aa9d9580eb4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e172bd22e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=16203 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7867b2ff-21a4-4d80-a573-8aa9d9580eb4,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=7867b2ff-21a4-4d80-a573-8aa9d9580eb4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-metadefs-load-js4mx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e172bd22e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=16203 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-metadefs-load-js4mx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2e172bd22e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=292 identity=16203 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-metadefs-load-js4mx subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e172bd22e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=292 identity=16203 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-metadefs-load-js4mx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2e172bd22e endpointID=292 k8sNamespace=openstack k8sPodName=glance-metadefs-load-js4mx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7867b2ff-21a4-4d80-a573-8aa9d9580eb4 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=7867b2ff-21a4-4d80-a573-8aa9d9580eb4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2e172bd22e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=292 identity=16203 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-metadefs-load-js4mx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 2831388c-4a05-41fd-a085-1cc1cf644a68 default }" containerID=2816dd0e6cc99c9d249a173a2bbfd62eec9b56c7120a3369884b2fe007a789d7 datapathConfiguration="&{false false false false false }" interface=lxc57b259c5522d k8sPodName=openstack/glance-storage-init-vw9f2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2816dd0e6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1532 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-storage-init-vw9f2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2816dd0e6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1532 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=56f0a9bd-324c-40b2-813a-4d801ed721ee,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=56f0a9bd-324c-40b2-813a-4d801ed721ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-storage-init-vw9f2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=56f0a9bd-324c-40b2-813a-4d801ed721ee;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=56f0a9bd-324c-40b2-813a-4d801ed721ee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2816dd0e6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1532 identity=38902 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=56f0a9bd-324c-40b2-813a-4d801ed721ee,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=56f0a9bd-324c-40b2-813a-4d801ed721ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-storage-init-vw9f2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2816dd0e6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1532 identity=38902 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-storage-init-vw9f2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2816dd0e6c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1532 identity=38902 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-storage-init-vw9f2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2816dd0e6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1532 identity=38902 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-storage-init-vw9f2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2816dd0e6c endpointID=1532 k8sNamespace=openstack k8sPodName=glance-storage-init-vw9f2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=56f0a9bd-324c-40b2-813a-4d801ed721ee k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=56f0a9bd-324c-40b2-813a-4d801ed721ee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2816dd0e6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1532 identity=38902 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-storage-init-vw9f2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 0b7e9941-5884-4cf0-a5b0-0aed9038958e default }" containerID=34692f66a68743ffd855b00f217e9e0869a79fe48ef08e52f378097d2e2a6e94 datapathConfiguration="&{false false false false false }" interface=lxced925c653338 k8sPodName=openstack/glance-api-5d6595767c-w9pdj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34692f66a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-api-5d6595767c-w9pdj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34692f66a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-api-5d6595767c-w9pdj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34692f66a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 identity=44736 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-api-5d6595767c-w9pdj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34692f66a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 identity=44736 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-api-5d6595767c-w9pdj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34692f66a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2251 identity=44736 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-api-5d6595767c-w9pdj subsys=endpoint level=info msg="Successful endpoint creation" containerID=34692f66a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2251 identity=44736 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-api-5d6595767c-w9pdj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.100 72df1af2-1e02-4c4f-b8cf-ad3dfcb2a1bb default }" containerID=cff8c08eeda21a2634261ae8b0bea5ae1905ecc9400084172a3030946788ab88 datapathConfiguration="&{false false false false false }" interface=lxcf708d814aef1 k8sPodName=openstack/staffeln-api-79798c7c7f-bfw67 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cff8c08eed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/staffeln-api-79798c7c7f-bfw67 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cff8c08eed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/staffeln-api-79798c7c7f-bfw67 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cff8c08eed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 identity=62971 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/staffeln-api-79798c7c7f-bfw67 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cff8c08eed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 identity=62971 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/staffeln-api-79798c7c7f-bfw67 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 d11c6bc9-fbd1-4be0-8e57-4343f349d659 default }" containerID=9cf68261307c019eff119d4e8f084a3b591bda4457fc380ddecd28dbf5797ee4 datapathConfiguration="&{false false false false false }" interface=lxc779cafd3eeb7 k8sPodName=openstack/staffeln-db-init-fxd5c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9cf6826130 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-db-init-fxd5c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9cf6826130 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5d5b92c2-c18f-4847-8c4e-4f6ed98a8ddf,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=5d5b92c2-c18f-4847-8c4e-4f6ed98a8ddf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-db-init-fxd5c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=5d5b92c2-c18f-4847-8c4e-4f6ed98a8ddf;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=5d5b92c2-c18f-4847-8c4e-4f6ed98a8ddf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9cf6826130 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identity=3159 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5d5b92c2-c18f-4847-8c4e-4f6ed98a8ddf,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=5d5b92c2-c18f-4847-8c4e-4f6ed98a8ddf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-db-init-fxd5c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9cf6826130 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identity=3159 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-db-init-fxd5c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cff8c08eed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=728 identity=62971 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/staffeln-api-79798c7c7f-bfw67 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cff8c08eed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=728 identity=62971 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/staffeln-api-79798c7c7f-bfw67 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.217 725268a6-1448-486e-a447-7ab7ef72a19b default }" containerID=281d13664933cc404baabc65af67aaec8d33cddbd1d0a513206fdffa9b5499f8 datapathConfiguration="&{false false false false false }" interface=lxc41086f34d85b k8sPodName=openstack/staffeln-conductor-654c687496-jvdwx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=281d136649 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/staffeln-conductor-654c687496-jvdwx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=281d136649 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/staffeln-conductor-654c687496-jvdwx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=281d136649 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identity=54714 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/staffeln-conductor-654c687496-jvdwx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=281d136649 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identity=54714 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/staffeln-conductor-654c687496-jvdwx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9cf6826130 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=229 identity=3159 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-db-init-fxd5c subsys=endpoint level=info msg="Successful endpoint creation" containerID=9cf6826130 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=229 identity=3159 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-db-init-fxd5c subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=281d136649 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=40 identity=54714 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/staffeln-conductor-654c687496-jvdwx subsys=endpoint level=info msg="Successful endpoint creation" containerID=281d136649 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=40 identity=54714 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/staffeln-conductor-654c687496-jvdwx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9cf6826130 endpointID=229 k8sNamespace=openstack k8sPodName=staffeln-db-init-fxd5c subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=5d5b92c2-c18f-4847-8c4e-4f6ed98a8ddf k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=5d5b92c2-c18f-4847-8c4e-4f6ed98a8ddf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=9cf6826130 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=229 identity=3159 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/staffeln-db-init-fxd5c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 667f1da0-38c7-4318-b596-7d384d13cea2 default }" containerID=7fbcdf27a3f34a2bec68f850528f1327eaad9fd84a8c7a749dc584ccf072d13a datapathConfiguration="&{false false false false false }" interface=lxc15f247d24606 k8sPodName=openstack/staffeln-db-sync-2c792 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7fbcdf27a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2009 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/staffeln-db-sync-2c792 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7fbcdf27a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2009 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=357ea4ef-8b80-41ad-87ad-d11c1b02fc3e,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=357ea4ef-8b80-41ad-87ad-d11c1b02fc3e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/staffeln-db-sync-2c792 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=357ea4ef-8b80-41ad-87ad-d11c1b02fc3e;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=357ea4ef-8b80-41ad-87ad-d11c1b02fc3e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7fbcdf27a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2009 identity=29190 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=357ea4ef-8b80-41ad-87ad-d11c1b02fc3e,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=357ea4ef-8b80-41ad-87ad-d11c1b02fc3e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/staffeln-db-sync-2c792 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7fbcdf27a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2009 identity=29190 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/staffeln-db-sync-2c792 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7fbcdf27a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2009 identity=29190 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/staffeln-db-sync-2c792 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7fbcdf27a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2009 identity=29190 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/staffeln-db-sync-2c792 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager