level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.098586ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="157.234µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.109786ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="9.15µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=94.043617ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="10.47µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="16.451µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="48.001µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="51.261µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="63.441µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="432.53µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.37µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.198806ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.297298ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="55.801µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="40.461µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="455.101µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="92.592µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="76.952µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=47.051719ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="101.082µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="7.501µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.32µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.141.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.37432ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="6.93µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.792307ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="5.62µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.954011ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.04µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.48µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="8.44µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.69µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="85.112µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="12.46µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="92.432µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="372.959µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.97µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="39.671µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="648.656µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="926.352µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.238659ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.06µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="13.251µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.141 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.141 ipAddr.ipv6="" k8sNodeIP=199.204.45.141 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.141" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.84" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.141" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.141} {CiliumInternalIP 10.0.0.84}] 10.0.0.0/24 [] [] 10.0.0.119 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:39745" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.373379642s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="17.35µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="6.461µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="61.141µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="24.461µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1375 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1375 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1375 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.498948619s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=289.498107ms file-path=/var/run/cilium/state/templates/d309276867ea91952b537c06b3997ad0a0657f0f40c60c269e35120414095a31/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1375 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 ipv4=10.0.0.119 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identityLabels="reserved:health" ipv4=10.0.0.119 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identity=4 identityLabels="reserved:health" ipv4=10.0.0.119 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 f0d0eacf-91c1-4294-be0a-0148172c1d25 default }" containerID=d6ad7d4556c196fb1ff5e4d49fcc8fbd996d1107b806bf8407ae736f5cd5d225 datapathConfiguration="&{false false false false false }" interface=lxceb759f4a6894 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k5hjz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6ad7d4556 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3172 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k5hjz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6ad7d4556 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3172 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k5hjz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d6ad7d4556 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3172 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k5hjz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6ad7d4556 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3172 identity=4936 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k5hjz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6ad7d4556 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3172 identity=4936 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k5hjz subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.077552585s file-path=/var/run/cilium/state/templates/970ea6b115ac0577513d89dd49cdff453e9a5c390e0426bfe777423b0a182f93/bpf_lxc.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.83 fdf489fa-7895-4443-8b6a-17749044d013 default }" containerID=b397e0a0d11e056c134b21c63654b140f410339d44b98fe9c021aef4cc51fbe1 datapathConfiguration="&{false false false false false }" interface=lxc4d6ed6fe41cf k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-x57qg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b397e0a0d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-x57qg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b397e0a0d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-x57qg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b397e0a0d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 identity=42046 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-x57qg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b397e0a0d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 identity=42046 ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-x57qg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 eb8fa966-4d56-4853-a91d-190c06e7cc3b default }" containerID=f7a5642511760bce6e68b4b92e3ad85fd6a5580cb795ab65552c068e882d5b72 datapathConfiguration="&{false false false false false }" interface=lxc3352d92c6c3c k8sPodName=kube-system/coredns-7c96b6546b-5272k labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.69 5046dcad-c736-423d-9ad6-de41060ca3f5 default }" containerID=ae07f28e3b74d300eeaee1525ae3a1245362d9d4f46e4b878d3723fa33ab73c1 datapathConfiguration="&{false false false false false }" interface=lxc77fefa77d1c6 k8sPodName=kube-system/coredns-67659f764b-fq5c2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7a5642511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1430 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5272k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 a5ea4695-d19a-4a74-a6e9-40d9a4cdc603 default }" containerID=52432ad273b3c271b8414ffeea0b3bac62a19df98bcd98a8a18d4f617b7c0cc8 datapathConfiguration="&{false false false false false }" interface=lxcffe0ad1b0bcc k8sPodName=local-path-storage/local-path-provisioner-679c578f5-j2926 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.183 b5228f0c-5cfd-4fe6-a472-6b0aba5e0832 default }" containerID=54f1513a1caefc5d30fcf15a0ef2e413e0134b09deabd9207bf9229abef43fef datapathConfiguration="&{false false false false false }" interface=lxcb98eac140a2e k8sPodName=kube-system/coredns-67659f764b-jzrnm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52432ad273 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3563 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-j2926 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 20fe9883-039d-4482-ac7f-6d27f01f80df default }" containerID=734aadcd9c052cad8e5e285c86467411f5f952cc672b1b10b2f15db2dddba811 datapathConfiguration="&{false false false false false }" interface=lxcd67eb53bc599 k8sPodName=cert-manager/cert-manager-75c4c745bc-fmr82 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae07f28e3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-fq5c2 subsys=endpoint level=info msg="New endpoint" containerID=54f1513a1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 ipv4=10.0.0.183 ipv6= k8sPodName=kube-system/coredns-67659f764b-jzrnm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52432ad273 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3563 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-j2926 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=f7a5642511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1430 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5272k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae07f28e3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-fq5c2 subsys=endpoint level=info msg="New endpoint" containerID=734aadcd9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2045 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fmr82 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=734aadcd9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2045 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fmr82 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54f1513a1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.183 ipv6= k8sPodName=kube-system/coredns-67659f764b-jzrnm subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52432ad273 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3563 identity=56026 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-j2926 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=52432ad273 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3563 identity=56026 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-j2926 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7a5642511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1430 identity=4963 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5272k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7a5642511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1430 identity=4963 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5272k subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae07f28e3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=4963 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-fq5c2 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=ae07f28e3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=4963 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-fq5c2 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54f1513a1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 identity=4963 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.183 ipv6= k8sPodName=kube-system/coredns-67659f764b-jzrnm oldIdentity="no identity" subsys=endpoint level=info msg="Identity of endpoint changed" containerID=734aadcd9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2045 identity=35400 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fmr82 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54f1513a1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 identity=4963 ipv4=10.0.0.183 ipv6= k8sPodName=kube-system/coredns-67659f764b-jzrnm subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=734aadcd9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2045 identity=35400 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fmr82 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6ad7d4556 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3172 identity=4936 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k5hjz subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6ad7d4556 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3172 identity=4936 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k5hjz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=789 identity=4 ipv4=10.0.0.119 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 b54ac271-88b8-4cb7-8ede-8ad8ae94beab default }" containerID=10a403eb85304ef9d0d6f55bbe8fa389244790f1439d6877e5db898de35b0698 datapathConfiguration="&{false false false false false }" interface=lxc44f7a2a44890 k8sPodName=cert-manager/cert-manager-startupapicheck-2ct5q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10a403eb85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2ct5q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10a403eb85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=2f9c0827-0bf8-4400-980c-7b5fac436863,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=2f9c0827-0bf8-4400-980c-7b5fac436863,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2ct5q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=734aadcd9c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2045 identity=35400 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fmr82 subsys=endpoint level=info msg="Successful endpoint creation" containerID=734aadcd9c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2045 identity=35400 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fmr82 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=54f1513a1c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1185 identity=4963 ipv4=10.0.0.183 ipv6= k8sPodName=kube-system/coredns-67659f764b-jzrnm subsys=endpoint level=info msg="Successful endpoint creation" containerID=54f1513a1c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1185 identity=4963 ipv4=10.0.0.183 ipv6= k8sPodName=kube-system/coredns-67659f764b-jzrnm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f7a5642511 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1430 identity=4963 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5272k subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7a5642511 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1430 identity=4963 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5272k subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ae07f28e3b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=502 identity=4963 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-fq5c2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae07f28e3b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=502 identity=4963 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-fq5c2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=52432ad273 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3563 identity=56026 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-j2926 subsys=endpoint level=info msg="Successful endpoint creation" containerID=52432ad273 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3563 identity=56026 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-j2926 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b397e0a0d1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1444 identity=42046 ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-x57qg subsys=endpoint level=info msg="Successful endpoint creation" containerID=b397e0a0d1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1444 identity=42046 ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-x57qg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=10a403eb85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2ct5q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=2f9c0827-0bf8-4400-980c-7b5fac436863;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=2f9c0827-0bf8-4400-980c-7b5fac436863;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10a403eb85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identity=16457 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=2f9c0827-0bf8-4400-980c-7b5fac436863,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=2f9c0827-0bf8-4400-980c-7b5fac436863,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2ct5q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10a403eb85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identity=16457 ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2ct5q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=10a403eb85 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=75 identity=16457 ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2ct5q subsys=endpoint level=info msg="Successful endpoint creation" containerID=10a403eb85 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=75 identity=16457 ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2ct5q subsys=daemon level=info msg="Waited for 1.000722226s due to client-side throttling, not priority and fairness, request: POST:https://10.96.0.1:443/apis/cilium.io/v2/namespaces/kube-system/ciliumendpoints" subsys=klog level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f7a5642511 endpointID=1430 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-5272k subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=f7a5642511 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1430 identity=4963 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5272k subsys=endpoint level=info msg="Delete endpoint request" containerID=10a403eb85 endpointID=75 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-2ct5q subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=2f9c0827-0bf8-4400-980c-7b5fac436863 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=2f9c0827-0bf8-4400-980c-7b5fac436863 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=10a403eb85 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=75 identity=16457 ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2ct5q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 011c4155-643d-421d-91b5-7fc0616e6713 default }" containerID=a5fa79ca345bca071f1c0fd5d9cb60568a5d968914315088d31ea9deadf68209 datapathConfiguration="&{false false false false false }" interface=lxce1bf9b60d3aa k8sPodName=ingress-nginx/ingress-nginx-admission-create-td7pg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5fa79ca34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-td7pg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5fa79ca34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=eb380523-f0c4-4340-ae74-0baecf2d543f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=eb380523-f0c4-4340-ae74-0baecf2d543f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-td7pg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=eb380523-f0c4-4340-ae74-0baecf2d543f;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=eb380523-f0c4-4340-ae74-0baecf2d543f;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5fa79ca34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 identity=29518 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=eb380523-f0c4-4340-ae74-0baecf2d543f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=eb380523-f0c4-4340-ae74-0baecf2d543f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-td7pg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a5fa79ca34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 identity=29518 ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-td7pg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5fa79ca34 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=580 identity=29518 ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-td7pg subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5fa79ca34 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=580 identity=29518 ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-td7pg subsys=daemon level=info msg="Delete endpoint request" containerID=a5fa79ca34 endpointID=580 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-td7pg subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=eb380523-f0c4-4340-ae74-0baecf2d543f k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=eb380523-f0c4-4340-ae74-0baecf2d543f k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=a5fa79ca34 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=580 identity=29518 ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-td7pg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 71778e70-ef88-44a6-86df-beda19e1e9c1 default }" containerID=f0dec2ed27d98eea67492ad0f03f01b20290b24b629f413c6ddbac282b2cb617 datapathConfiguration="&{false false false false false }" interface=lxc1bf23fb845e0 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d2c7d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0dec2ed27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2459 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d2c7d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0dec2ed27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2459 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d2c7d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f0dec2ed27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2459 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d2c7d line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0dec2ed27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2459 identity=9065 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d2c7d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0dec2ed27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2459 identity=9065 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d2c7d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f0dec2ed27 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2459 identity=9065 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d2c7d subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0dec2ed27 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2459 identity=9065 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d2c7d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.76 d26e8c5f-a358-420c-b913-2e6306513a42 default }" containerID=08f2ec8ef261dcad71ef630151f4ffb3d0bd5f05853c794f5fc0534b1d4d6bd8 datapathConfiguration="&{false false false false false }" interface=lxc962d438d8321 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4c4f7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08f2ec8ef2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2552 ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4c4f7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08f2ec8ef2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2552 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2f33a410-49d6-4497-aad3-bb289d788a4e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=2f33a410-49d6-4497-aad3-bb289d788a4e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4c4f7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=2f33a410-49d6-4497-aad3-bb289d788a4e;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=2f33a410-49d6-4497-aad3-bb289d788a4e;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08f2ec8ef2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2552 identity=58745 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2f33a410-49d6-4497-aad3-bb289d788a4e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=2f33a410-49d6-4497-aad3-bb289d788a4e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4c4f7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08f2ec8ef2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2552 identity=58745 ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4c4f7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=08f2ec8ef2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2552 identity=58745 ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4c4f7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=08f2ec8ef2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2552 identity=58745 ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4c4f7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=08f2ec8ef2 endpointID=2552 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-4c4f7 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=2f33a410-49d6-4497-aad3-bb289d788a4e k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=2f33a410-49d6-4497-aad3-bb289d788a4e k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=08f2ec8ef2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2552 identity=58745 ipv4=10.0.0.76 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4c4f7 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ad130380-ae56-49e8-bdb7-7e7091e806a9] Description:}]" policyAddRequest=647b704b-61a7-4442-a1e6-3aeb5861bfa7 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=647b704b-61a7-4442-a1e6-3aeb5861bfa7 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=772e6c27-6339-4b91-8989-605a9fc54268] Description:}]" policyAddRequest=69baf57f-b32d-4f6a-8cb1-f2d2676ea9dd subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=69baf57f-b32d-4f6a-8cb1-f2d2676ea9dd policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.174 c14b8a2c-b9cf-427c-addd-317927539257 default }" containerID=c8415cca9e8ff9d558862f32a34f54012aaaa130a5ba576609a897422915ca1d datapathConfiguration="&{false false false false false }" interface=lxc5297db8ce3ef k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c2x5q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8415cca9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c2x5q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8415cca9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c2x5q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c8415cca9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c2x5q line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c8415cca9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identity=12197 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c2x5q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8415cca9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identity=12197 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c2x5q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8415cca9e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=382 identity=12197 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c2x5q subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8415cca9e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=382 identity=12197 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c2x5q subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.248 5144b5a7-e7fa-495b-b11b-8559864be02e default }" containerID=d9f83329ac348477dbda57b2091c6f8762b725ac88f7abe89e8be4d4f4a34cc2 datapathConfiguration="&{false false false false false }" interface=lxc70405e07d431 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-wbx2q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9f83329ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-wbx2q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9f83329ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-wbx2q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9f83329ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 identity=17762 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-wbx2q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9f83329ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 identity=17762 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-wbx2q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d9f83329ac datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=760 identity=17762 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-wbx2q subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9f83329ac datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=760 identity=17762 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-wbx2q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.22 17092947-ec7e-45f7-ac1b-e2a38a3b9317 default }" containerID=6d1dbb820252e2b55c1d03a8d2d24c825d86adbbe9766c4429f07a3868dff8eb datapathConfiguration="&{false false false false false }" interface=lxc5e7eb396be6b k8sPodName=openstack/pxc-operator-69cb5bbdb9-wfbn8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d1dbb8202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1027 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wfbn8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d1dbb8202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1027 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wfbn8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d1dbb8202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1027 identity=9362 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wfbn8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d1dbb8202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1027 identity=9362 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wfbn8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6d1dbb8202 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1027 identity=9362 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wfbn8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d1dbb8202 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1027 identity=9362 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wfbn8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.152 77917453-1415-416f-a81e-3cb8f74d127b default }" containerID=5c46a4cd1eaa23a0ec632f6c2c2ff40db4a4682cc743a4aa37bc4cab40f3616f datapathConfiguration="&{false false false false false }" interface=lxcdf773d2fd3f8 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c46a4cd1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c46a4cd1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c46a4cd1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identity=18716 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c46a4cd1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identity=18716 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.50 f9550ee3-0310-437c-9969-7667a67fe111 default }" containerID=b0fed134df5c5382dbec75e6c0a9aad2d31619cd8eb413be9ecf341bc6ac9f26 datapathConfiguration="&{false false false false false }" interface=lxc5653f98904ef k8sPodName=local-path-storage/helper-pod-create-pvc-7d189778-9e9c-413a-bf52-e18a47414455 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0fed134df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1293 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d189778-9e9c-413a-bf52-e18a47414455 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0fed134df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1293 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d189778-9e9c-413a-bf52-e18a47414455 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0fed134df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1293 identity=33583 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d189778-9e9c-413a-bf52-e18a47414455 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0fed134df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1293 identity=33583 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d189778-9e9c-413a-bf52-e18a47414455 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c46a4cd1e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=252 identity=18716 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c46a4cd1e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=252 identity=18716 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b0fed134df datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1293 identity=33583 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d189778-9e9c-413a-bf52-e18a47414455 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0fed134df datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1293 identity=33583 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d189778-9e9c-413a-bf52-e18a47414455 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b0fed134df endpointID=1293 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7d189778-9e9c-413a-bf52-e18a47414455 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b0fed134df datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1293 identity=33583 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d189778-9e9c-413a-bf52-e18a47414455 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 b7b25892-a834-4619-a374-c84b49331529 default }" containerID=d38ec0372c7034d6835df52916d5d59912e5653b94d68a3eedad798b00ea5158 datapathConfiguration="&{false false false false false }" interface=lxc1a0bf450752c k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d38ec0372c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d38ec0372c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d38ec0372c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 identity=3540 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d38ec0372c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 identity=3540 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d38ec0372c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=955 identity=3540 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d38ec0372c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=955 identity=3540 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=377ae67d-4af8-4481-a32e-adb9f53f296e] Description:}]" policyAddRequest=0bd944db-81cc-4a3d-bb1d-13c9a100c4bf subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0bd944db-81cc-4a3d-bb1d-13c9a100c4bf policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.92 40b8c197-8b8a-40f8-bcce-c97b8d9e35f0 default }" containerID=68c3ff5d38776715f2894e60baf771d432c96af05604c687f5f1320126e43df7 datapathConfiguration="&{false false false false false }" interface=lxc8d37e3ed7705 k8sPodName=local-path-storage/helper-pod-create-pvc-c9d2cb8c-eee8-499c-9b63-2fdcb08c7547 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68c3ff5d38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9d2cb8c-eee8-499c-9b63-2fdcb08c7547 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68c3ff5d38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9d2cb8c-eee8-499c-9b63-2fdcb08c7547 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68c3ff5d38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 identity=33583 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9d2cb8c-eee8-499c-9b63-2fdcb08c7547 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68c3ff5d38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 identity=33583 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9d2cb8c-eee8-499c-9b63-2fdcb08c7547 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68c3ff5d38 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=91 identity=33583 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9d2cb8c-eee8-499c-9b63-2fdcb08c7547 subsys=endpoint level=info msg="Successful endpoint creation" containerID=68c3ff5d38 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=91 identity=33583 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9d2cb8c-eee8-499c-9b63-2fdcb08c7547 subsys=daemon level=info msg="Delete endpoint request" containerID=68c3ff5d38 endpointID=91 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c9d2cb8c-eee8-499c-9b63-2fdcb08c7547 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=68c3ff5d38 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=91 identity=33583 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c9d2cb8c-eee8-499c-9b63-2fdcb08c7547 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 f9d91ff3-91c1-419a-a1fd-938b7c145bea default }" containerID=f79757a22462799345ef234d3185b1621b455a1d660e2b5ae168f525d4f4db5e datapathConfiguration="&{false false false false false }" interface=lxc8071992a0167 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f79757a224 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f79757a224 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f79757a224 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identity=30941 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f79757a224 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identity=30941 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f79757a224 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=991 identity=30941 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f79757a224 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=991 identity=30941 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=3b6e543c-1548-4b7e-9951-466564fc51f1] Description:}]" policyAddRequest=592cc399-b56e-4c19-af75-4b3e9f6f139e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=592cc399-b56e-4c19-af75-4b3e9f6f139e policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.67 a3ea306c-cd28-4049-99c5-76f65554c906 default }" containerID=078da4285b735db43cd78ed3f4020bbf2f0c42a4f934378fc9890e3a168556b4 datapathConfiguration="&{false false false false false }" interface=lxcb9dfac2a555a k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=078da4285b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 ipv4=10.0.0.67 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=078da4285b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.67 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=078da4285b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 identity=50077 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.67 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=078da4285b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 identity=50077 ipv4=10.0.0.67 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=078da4285b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1469 identity=50077 ipv4=10.0.0.67 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=078da4285b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1469 identity=50077 ipv4=10.0.0.67 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.011555318084055893 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.253 b9e32463-47ff-471a-ae60-f482a05496ca default }" containerID=3cc7b23519d2a0f4adcd627b0cb1588018765409a3b623cf849b36f0dfccfa63 datapathConfiguration="&{false false false false false }" interface=lxc8a9d2057cbd1 k8sPodName=monitoring/node-feature-discovery-worker-qqxrt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3cc7b23519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qqxrt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 906ed577-ad18-47b3-b21a-ae4926dbdd59 default }" containerID=2179c1324dd398946ecf6ae85123dc592ad6513867ac1a41f9beddc77431815b datapathConfiguration="&{false false false false false }" interface=lxc62a86d00aa91 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-h9grx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2179c1324d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1141 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-h9grx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3cc7b23519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qqxrt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=2179c1324d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1141 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-h9grx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3cc7b23519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identity=61371 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qqxrt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3cc7b23519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identity=61371 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qqxrt subsys=endpoint level=info msg="Invalid state transition skipped" containerID=2179c1324d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1141 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-h9grx line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2179c1324d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1141 identity=35193 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-h9grx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2179c1324d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1141 identity=35193 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-h9grx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3cc7b23519 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1390 identity=61371 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qqxrt subsys=endpoint level=info msg="Successful endpoint creation" containerID=3cc7b23519 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1390 identity=61371 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qqxrt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2179c1324d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1141 identity=35193 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-h9grx subsys=endpoint level=info msg="Successful endpoint creation" containerID=2179c1324d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1141 identity=35193 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-h9grx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.195 8f400e48-84b4-4f87-bdc8-0adea28cb393 default }" containerID=ec1acab502a146f6c47d54bb6e01b864f92a32a4fbe448cea5c47ae3abc9d73b datapathConfiguration="&{false false false false false }" interface=lxc01336db1f1db k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jn28j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec1acab502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jn28j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec1acab502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jn28j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec1acab502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 identity=61054 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jn28j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec1acab502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 identity=61054 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jn28j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec1acab502 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1136 identity=61054 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jn28j subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec1acab502 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1136 identity=61054 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jn28j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.180 04d9263b-2ff7-4141-bcb7-389770c1b734 default }" containerID=fdfd2fb8e6ee6781bbf42305a906d523253c237c2330c5771e3ec03f8e8e3e59 datapathConfiguration="&{false false false false false }" interface=lxc688312ba37d2 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2kd77 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdfd2fb8e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 ipv4=10.0.0.180 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2kd77 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdfd2fb8e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.180 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2kd77 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdfd2fb8e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identity=34117 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.180 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2kd77 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fdfd2fb8e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identity=34117 ipv4=10.0.0.180 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2kd77 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fdfd2fb8e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=905 identity=34117 ipv4=10.0.0.180 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2kd77 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdfd2fb8e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=905 identity=34117 ipv4=10.0.0.180 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2kd77 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1375 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-171-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01375 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01375 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01375 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01375:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1375 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 e700b101-6a9d-4032-aad5-eeff48aebd44 default }" containerID=178d0e6cc99b9824ec54fd7b316003382be46d19c5bbb87d551e0d0cbb6bf7fe datapathConfiguration="&{false false false false false }" interface=lxcfd10be652533 k8sPodName=monitoring/kube-prometheus-stack-admission-create-jfhb8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=178d0e6cc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jfhb8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=178d0e6cc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=fd03b057-f3ff-4567-b3cd-3972b6c28823,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=fd03b057-f3ff-4567-b3cd-3972b6c28823,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jfhb8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=fd03b057-f3ff-4567-b3cd-3972b6c28823;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=fd03b057-f3ff-4567-b3cd-3972b6c28823;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=178d0e6cc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identity=18975 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=fd03b057-f3ff-4567-b3cd-3972b6c28823,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=fd03b057-f3ff-4567-b3cd-3972b6c28823,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jfhb8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=178d0e6cc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identity=18975 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jfhb8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=178d0e6cc9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=281 identity=18975 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jfhb8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=178d0e6cc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=281 identity=18975 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jfhb8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=178d0e6cc9 endpointID=281 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-jfhb8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=fd03b057-f3ff-4567-b3cd-3972b6c28823 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=fd03b057-f3ff-4567-b3cd-3972b6c28823 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=178d0e6cc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=281 identity=18975 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jfhb8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 0f63a80a-e42a-4702-9331-37bf421659b8 default }" containerID=036aa4f7be72db083dabd4e975594cde591e28b632a510b5aeb17c8a5d12c78f datapathConfiguration="&{false false false false false }" interface=lxc44348bf5a515 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x92f2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=036aa4f7be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x92f2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=036aa4f7be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x92f2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=036aa4f7be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x92f2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=036aa4f7be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identity=10379 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x92f2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=036aa4f7be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identity=10379 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x92f2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 316b72f3-147e-4b49-9f29-c0d079ac0c18 default }" containerID=0cb4af5183c40e02a6cf3928aeb9344abaca206b9f1e42a567df5c811fdb2d7e datapathConfiguration="&{false false false false false }" interface=lxc64e6d4265f22 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-kqhpc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0cb4af5183 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-kqhpc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0cb4af5183 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-kqhpc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0cb4af5183 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identity=3843 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-kqhpc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0cb4af5183 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identity=3843 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-kqhpc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=036aa4f7be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=6 identity=10379 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x92f2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=036aa4f7be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=6 identity=10379 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x92f2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.247 10b36b2c-81b4-4612-8c85-536cad9534a6 default }" containerID=ec84cca3a03d0ef649c19834bc11b92e50f4f59ab5eef44d481e37250665e273 datapathConfiguration="&{false false false false false }" interface=lxc761a7fd8fc8e k8sPodName=monitoring/kube-prometheus-stack-grafana-7867b8d4f5-8xjvh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec84cca3a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3443 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7867b8d4f5-8xjvh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec84cca3a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3443 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7867b8d4f5-8xjvh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec84cca3a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3443 identity=11301 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7867b8d4f5-8xjvh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec84cca3a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3443 identity=11301 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7867b8d4f5-8xjvh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0cb4af5183 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=958 identity=3843 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-kqhpc subsys=endpoint level=info msg="Successful endpoint creation" containerID=0cb4af5183 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=958 identity=3843 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-kqhpc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ec84cca3a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3443 identity=11301 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7867b8d4f5-8xjvh subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec84cca3a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3443 identity=11301 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7867b8d4f5-8xjvh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.177 9c92a401-8724-4ccb-80a2-184178e9098a default }" containerID=d032a4ccdbb7e09c5b293e71b16a9dbdfd9d0a1450ae6ce139e7f7d529ec67aa datapathConfiguration="&{false false false false false }" interface=lxc953464618d0e k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fx7st labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d032a4ccdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fx7st subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d032a4ccdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=4e6df23b-41df-4526-a1c1-1e786d0964d6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=4e6df23b-41df-4526-a1c1-1e786d0964d6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fx7st subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=4e6df23b-41df-4526-a1c1-1e786d0964d6;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=4e6df23b-41df-4526-a1c1-1e786d0964d6;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d032a4ccdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 identity=32951 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=4e6df23b-41df-4526-a1c1-1e786d0964d6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=4e6df23b-41df-4526-a1c1-1e786d0964d6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fx7st oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d032a4ccdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 identity=32951 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fx7st subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d032a4ccdb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1058 identity=32951 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fx7st subsys=endpoint level=info msg="Successful endpoint creation" containerID=d032a4ccdb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1058 identity=32951 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fx7st subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.218 5a73f75f-3aca-4643-a6c2-c5c206f15100 default }" containerID=93bc8c1367e820d79f626d4809a776e596b8c132025ef956c51e6b8878fde35b datapathConfiguration="&{false false false false false }" interface=lxc5eec458e8792 k8sPodName=local-path-storage/helper-pod-create-pvc-a1d6cbce-ebf5-4d93-b59c-c60695b5ab66 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93bc8c1367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=402 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1d6cbce-ebf5-4d93-b59c-c60695b5ab66 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93bc8c1367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=402 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1d6cbce-ebf5-4d93-b59c-c60695b5ab66 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=93bc8c1367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=402 identity=33583 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1d6cbce-ebf5-4d93-b59c-c60695b5ab66 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93bc8c1367 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=402 identity=33583 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1d6cbce-ebf5-4d93-b59c-c60695b5ab66 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=93bc8c1367 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=402 identity=33583 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1d6cbce-ebf5-4d93-b59c-c60695b5ab66 subsys=endpoint level=info msg="Successful endpoint creation" containerID=93bc8c1367 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=402 identity=33583 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1d6cbce-ebf5-4d93-b59c-c60695b5ab66 subsys=daemon level=info msg="Delete endpoint request" containerID=d032a4ccdb endpointID=1058 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-fx7st subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=4e6df23b-41df-4526-a1c1-1e786d0964d6 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=4e6df23b-41df-4526-a1c1-1e786d0964d6 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=d032a4ccdb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1058 identity=32951 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fx7st subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 8f8dc685-14e3-46b2-b201-3e3e06ef282b default }" containerID=5b42747dba8476453a5bb55cef6a282d2bc0b34e7b22050c32da8576a37c872b datapathConfiguration="&{false false false false false }" interface=lxc9e127bcde328 k8sPodName=local-path-storage/helper-pod-create-pvc-68fe1982-75a6-49fc-98a0-9f858da63140 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b42747dba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3040 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68fe1982-75a6-49fc-98a0-9f858da63140 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b42747dba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3040 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68fe1982-75a6-49fc-98a0-9f858da63140 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5b42747dba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3040 identity=33583 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68fe1982-75a6-49fc-98a0-9f858da63140 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b42747dba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3040 identity=33583 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68fe1982-75a6-49fc-98a0-9f858da63140 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5b42747dba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3040 identity=33583 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68fe1982-75a6-49fc-98a0-9f858da63140 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b42747dba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3040 identity=33583 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68fe1982-75a6-49fc-98a0-9f858da63140 subsys=daemon level=info msg="Delete endpoint request" containerID=5b42747dba endpointID=3040 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-68fe1982-75a6-49fc-98a0-9f858da63140 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=93bc8c1367 endpointID=402 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a1d6cbce-ebf5-4d93-b59c-c60695b5ab66 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5b42747dba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3040 identity=33583 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68fe1982-75a6-49fc-98a0-9f858da63140 subsys=endpoint level=info msg="Removed endpoint" containerID=93bc8c1367 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=402 identity=33583 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1d6cbce-ebf5-4d93-b59c-c60695b5ab66 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 04032884-b367-40a9-96f8-5e2edfbbbbc2 default }" containerID=f9beea39ea7642739df56b1d3047e0d7b7b4b493a7256b0d572570c166e69dfc datapathConfiguration="&{false false false false false }" interface=lxce7eb3af2a94b k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9beea39ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1657 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9beea39ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1657 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9beea39ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1657 identity=2611 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9beea39ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1657 identity=2611 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f9beea39ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1657 identity=2611 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9beea39ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1657 identity=2611 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.219 65dc2267-179a-4b4a-98fe-ffbe2e718dd9 default }" containerID=d05583833da42bad150b86b70230f4e9e691972a2c9ea929a6a49f63837a60e8 datapathConfiguration="&{false false false false false }" interface=lxcfc087e5c5767 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d05583833d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d05583833d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d05583833d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identity=44479 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d05583833d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identity=44479 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d05583833d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=26 identity=44479 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d05583833d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=26 identity=44479 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.126 fe0be242-6a20-4c15-842e-09c011d72c37 default }" containerID=b450e438ad569e4bc64707ffae149b8ae9c0a057f02dfb5566c25efb7e978684 datapathConfiguration="&{false false false false false }" interface=lxceb6e435f0bea k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b450e438ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b450e438ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b450e438ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 identity=25122 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b450e438ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 identity=25122 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 3db8e1f9-38ac-4049-a446-34a6054868b6 default }" containerID=6fa506d8a9d6db2162d98644ae54ae682873d441a92c2181fd3e23ecc0e5bbdc datapathConfiguration="&{false false false false false }" interface=lxc5ef842664538 k8sPodName=monitoring/loki-gateway-cf54cb88c-cv5mp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fa506d8a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2039 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-cv5mp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fa506d8a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2039 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-cv5mp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fa506d8a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2039 identity=36111 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-cv5mp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fa506d8a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2039 identity=36111 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-cv5mp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 a86a2b82-e286-49db-9f91-a6c1a92aec9a default }" containerID=8c7ccb49a859dc6e4cc42d7f52566d94eff70b12501468182dec30ee4d8c91c8 datapathConfiguration="&{false false false false false }" interface=lxc0d9cfd16057a k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c7ccb49a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1247 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c7ccb49a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1247 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c7ccb49a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1247 identity=10117 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c7ccb49a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1247 identity=10117 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b450e438ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=700 identity=25122 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b450e438ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=700 identity=25122 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6fa506d8a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2039 identity=36111 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-cv5mp subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fa506d8a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2039 identity=36111 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-cv5mp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8c7ccb49a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1247 identity=10117 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c7ccb49a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1247 identity=10117 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.38 00db1c71-2905-49c9-8b12-49b44fd47006 default }" containerID=d9a980968cab2a7e7e9cc1ef3da288552f540726aa75bb00e258e46f72d76409 datapathConfiguration="&{false false false false false }" interface=lxc107c6bc41cb1 k8sPodName=local-path-storage/helper-pod-create-pvc-21c28c0d-a83b-44a7-b0a0-b160c85718a7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9a980968c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-21c28c0d-a83b-44a7-b0a0-b160c85718a7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9a980968c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-21c28c0d-a83b-44a7-b0a0-b160c85718a7 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9a980968c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identity=33583 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-21c28c0d-a83b-44a7-b0a0-b160c85718a7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9a980968c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identity=33583 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-21c28c0d-a83b-44a7-b0a0-b160c85718a7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d9a980968c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=358 identity=33583 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-21c28c0d-a83b-44a7-b0a0-b160c85718a7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9a980968c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=358 identity=33583 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-21c28c0d-a83b-44a7-b0a0-b160c85718a7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.107 a422a4e9-8959-42cc-a74c-6d3c6cc4e894 default }" containerID=13b1effb625d65fc3355c1044e65b053588607f11d924534e7f49875ad7b5f24 datapathConfiguration="&{false false false false false }" interface=lxc518dec10f0d3 k8sPodName=monitoring/vector-xxcj4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13b1effb62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3307 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/vector-xxcj4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13b1effb62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3307 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/vector-xxcj4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13b1effb62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3307 identity=27654 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/vector-xxcj4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13b1effb62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3307 identity=27654 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/vector-xxcj4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=13b1effb62 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3307 identity=27654 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/vector-xxcj4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=13b1effb62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3307 identity=27654 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/vector-xxcj4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d9a980968c endpointID=358 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-21c28c0d-a83b-44a7-b0a0-b160c85718a7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d9a980968c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=358 identity=33583 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-21c28c0d-a83b-44a7-b0a0-b160c85718a7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 703753de-2b8e-4927-b411-86b28f7ad62f default }" containerID=9d28fadb078bb438e4855cbdd75b21f42079ccdbedd94c7331d2a830483f578a datapathConfiguration="&{false false false false false }" interface=lxc64b3cc5e32ee k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-rzwkv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d28fadb07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-rzwkv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d28fadb07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-rzwkv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d28fadb07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identity=15499 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-rzwkv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d28fadb07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identity=15499 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-rzwkv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 99c578da-2a01-4a73-9087-23672b085a1e default }" containerID=a142aa9c4a17f85f69b223e1b03d39d93acc0dbcf7736e1369ed6b21cc2bf203 datapathConfiguration="&{false false false false false }" interface=lxc0d9288fefd7a k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a142aa9c4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3155 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a142aa9c4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3155 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a142aa9c4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3155 identity=1160 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a142aa9c4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3155 identity=1160 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d28fadb07 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=23 identity=15499 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-rzwkv subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d28fadb07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=23 identity=15499 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-rzwkv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a142aa9c4a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3155 identity=1160 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a142aa9c4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3155 identity=1160 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.35 4207ce15-6464-4066-8a78-c87234a99c71 default }" containerID=6d420a8c94d04ddb498bd196ba334720da7252c16dc6aac2d59d879e7ce7fe58 datapathConfiguration="&{false false false false false }" interface=lxc343fdad7bcc0 k8sPodName=openstack/memcached-memcached-6479589586-94pkp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d420a8c94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=39 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-94pkp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d420a8c94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=39 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-94pkp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6d420a8c94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=39 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.35 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-94pkp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d420a8c94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=39 identity=30277 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-94pkp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d420a8c94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=39 identity=30277 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-94pkp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d420a8c94 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=39 identity=30277 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-94pkp subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d420a8c94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=39 identity=30277 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-94pkp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.122 7e6523e4-c8af-47dc-99fa-83ce4d5800c4 default }" containerID=a8b5fd943c4919c0922020435b80941e1c6dc713310f3c3a15215e857e7c799e datapathConfiguration="&{false false false false false }" interface=lxc7eec021eced3 k8sPodName=local-path-storage/helper-pod-create-pvc-1f5a44ea-29bf-4267-8671-4458458ce2ee labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8b5fd943c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3718 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1f5a44ea-29bf-4267-8671-4458458ce2ee subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8b5fd943c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3718 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1f5a44ea-29bf-4267-8671-4458458ce2ee subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a8b5fd943c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3718 identity=33583 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1f5a44ea-29bf-4267-8671-4458458ce2ee oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8b5fd943c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3718 identity=33583 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1f5a44ea-29bf-4267-8671-4458458ce2ee subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a8b5fd943c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3718 identity=33583 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1f5a44ea-29bf-4267-8671-4458458ce2ee subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8b5fd943c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3718 identity=33583 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1f5a44ea-29bf-4267-8671-4458458ce2ee subsys=daemon level=info msg="Delete endpoint request" containerID=a8b5fd943c endpointID=3718 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1f5a44ea-29bf-4267-8671-4458458ce2ee subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a8b5fd943c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3718 identity=33583 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1f5a44ea-29bf-4267-8671-4458458ce2ee subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 851af859-403c-4ffd-a06d-f7e0823fe0fb default }" containerID=c84044b2cdd51d9a9e4e3419c4a67985d40e42d6bfe3a7aa6627e3d4df3647ea datapathConfiguration="&{false false false false false }" interface=lxc81794bebdbbf k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c84044b2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c84044b2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c84044b2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identity=46804 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c84044b2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identity=46804 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c84044b2cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=587 identity=46804 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c84044b2cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=587 identity=46804 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.123 a080f5bc-7728-4535-a7ec-87f77b0eb0ee default }" containerID=854ffe7d639437f693232ad7addbe6ea8d3c31ee5936e6556615f713a4b3e501 datapathConfiguration="&{false false false false false }" interface=lxc0fb1dde3ff0c k8sPodName=openstack/keystone-api-864b59d9df-zk8lx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=854ffe7d63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-api-864b59d9df-zk8lx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=854ffe7d63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-api-864b59d9df-zk8lx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=854ffe7d63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-api-864b59d9df-zk8lx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=854ffe7d63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identity=48181 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-api-864b59d9df-zk8lx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=854ffe7d63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identity=48181 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-api-864b59d9df-zk8lx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=854ffe7d63 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=440 identity=48181 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-api-864b59d9df-zk8lx subsys=endpoint level=info msg="Successful endpoint creation" containerID=854ffe7d63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=440 identity=48181 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-api-864b59d9df-zk8lx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.74 99381ed9-6e04-4641-b474-6bb25e1c6fe5 default }" containerID=32f6d529c3ee6ff1db48e019d04d27f52a51f86768a1b54f59226a7e5e00f6a6 datapathConfiguration="&{false false false false false }" interface=lxcb53e99ca4483 k8sPodName=openstack/keystone-credential-setup-mqwqj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=32f6d529c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1328 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-credential-setup-mqwqj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=32f6d529c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1328 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=155756ad-1247-404a-a3f9-b999b722b6de,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=155756ad-1247-404a-a3f9-b999b722b6de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-credential-setup-mqwqj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=155756ad-1247-404a-a3f9-b999b722b6de;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=155756ad-1247-404a-a3f9-b999b722b6de;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32f6d529c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1328 identity=19042 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=155756ad-1247-404a-a3f9-b999b722b6de,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=155756ad-1247-404a-a3f9-b999b722b6de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-credential-setup-mqwqj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=32f6d529c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1328 identity=19042 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-credential-setup-mqwqj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=32f6d529c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1328 identity=19042 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-credential-setup-mqwqj subsys=endpoint level=info msg="Successful endpoint creation" containerID=32f6d529c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1328 identity=19042 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-credential-setup-mqwqj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=32f6d529c3 endpointID=1328 k8sNamespace=openstack k8sPodName=keystone-credential-setup-mqwqj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=155756ad-1247-404a-a3f9-b999b722b6de k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=155756ad-1247-404a-a3f9-b999b722b6de k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=32f6d529c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1328 identity=19042 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-credential-setup-mqwqj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 34b0fd70-6701-486a-af14-ad5fcc974a16 default }" containerID=0f5dcb52cd5b1ef283b1b47cb3105eb855d435d1981a453e62480dac99e786d8 datapathConfiguration="&{false false false false false }" interface=lxc628a21081047 k8sPodName=openstack/keystone-db-init-vxdwk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f5dcb52cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2548 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-init-vxdwk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f5dcb52cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2548 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d459c2fd-5483-4c79-8d24-bc94145b31b5,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=d459c2fd-5483-4c79-8d24-bc94145b31b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-init-vxdwk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0f5dcb52cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2548 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-init-vxdwk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d459c2fd-5483-4c79-8d24-bc94145b31b5;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=d459c2fd-5483-4c79-8d24-bc94145b31b5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f5dcb52cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2548 identity=36796 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d459c2fd-5483-4c79-8d24-bc94145b31b5,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=d459c2fd-5483-4c79-8d24-bc94145b31b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-init-vxdwk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f5dcb52cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2548 identity=36796 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-init-vxdwk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f5dcb52cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2548 identity=36796 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-init-vxdwk subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f5dcb52cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2548 identity=36796 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-init-vxdwk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0f5dcb52cd endpointID=2548 k8sNamespace=openstack k8sPodName=keystone-db-init-vxdwk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d459c2fd-5483-4c79-8d24-bc94145b31b5 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=d459c2fd-5483-4c79-8d24-bc94145b31b5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0f5dcb52cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2548 identity=36796 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-init-vxdwk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 fbd0f2b8-6369-4df8-9d42-cc1ff46b9a21 default }" containerID=de02ce2a6b9b823a12a41469fe6b2ac81fb2143e0cd06e267916f8114dadf7ac datapathConfiguration="&{false false false false false }" interface=lxc450782c05e41 k8sPodName=openstack/keystone-fernet-setup-c5j7c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de02ce2a6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1804 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-fernet-setup-c5j7c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de02ce2a6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1804 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9f973cb7-e87c-4f8d-bc60-a412ce79ceca,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=9f973cb7-e87c-4f8d-bc60-a412ce79ceca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-fernet-setup-c5j7c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9f973cb7-e87c-4f8d-bc60-a412ce79ceca;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=9f973cb7-e87c-4f8d-bc60-a412ce79ceca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de02ce2a6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1804 identity=58937 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9f973cb7-e87c-4f8d-bc60-a412ce79ceca,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=9f973cb7-e87c-4f8d-bc60-a412ce79ceca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-fernet-setup-c5j7c oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=de02ce2a6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1804 identity=58937 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-fernet-setup-c5j7c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de02ce2a6b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1804 identity=58937 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-fernet-setup-c5j7c subsys=endpoint level=info msg="Successful endpoint creation" containerID=de02ce2a6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1804 identity=58937 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-fernet-setup-c5j7c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=de02ce2a6b endpointID=1804 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-c5j7c subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9f973cb7-e87c-4f8d-bc60-a412ce79ceca k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=9f973cb7-e87c-4f8d-bc60-a412ce79ceca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=de02ce2a6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1804 identity=58937 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-fernet-setup-c5j7c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 1b86b147-d92a-4f52-b5b2-4e991a7749a1 default }" containerID=1b97850a57083bb4a00d0e8469ae1b1958403f823abbcb16f282e48ec7737749 datapathConfiguration="&{false false false false false }" interface=lxc865c7c636bab k8sPodName=openstack/keystone-db-sync-nxfsv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b97850a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1949 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-nxfsv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b97850a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1949 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=79251408-7649-472f-b8c2-6891251e3613,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=79251408-7649-472f-b8c2-6891251e3613,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-nxfsv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=79251408-7649-472f-b8c2-6891251e3613;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=79251408-7649-472f-b8c2-6891251e3613;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b97850a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1949 identity=12691 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=79251408-7649-472f-b8c2-6891251e3613,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=79251408-7649-472f-b8c2-6891251e3613,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-nxfsv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b97850a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1949 identity=12691 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-nxfsv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1b97850a57 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1949 identity=12691 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-nxfsv subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b97850a57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1949 identity=12691 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-nxfsv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1b97850a57 endpointID=1949 k8sNamespace=openstack k8sPodName=keystone-db-sync-nxfsv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=79251408-7649-472f-b8c2-6891251e3613 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=79251408-7649-472f-b8c2-6891251e3613 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1b97850a57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1949 identity=12691 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-nxfsv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 2230c35f-1bb2-43c8-a3ef-5dbc5d61a8ff default }" containerID=c65286fab9eb2ab0c26871edc3de71c6d90f6e0901c60974d39447372c6ff0bd datapathConfiguration="&{false false false false false }" interface=lxce029975d0973 k8sPodName=openstack/keystone-rabbit-init-59zfn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c65286fab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-rabbit-init-59zfn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c65286fab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6b0d1494-5e31-45c7-a1c2-4c9f7820d2e9,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6b0d1494-5e31-45c7-a1c2-4c9f7820d2e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-rabbit-init-59zfn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6b0d1494-5e31-45c7-a1c2-4c9f7820d2e9;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=6b0d1494-5e31-45c7-a1c2-4c9f7820d2e9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c65286fab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 identity=33629 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6b0d1494-5e31-45c7-a1c2-4c9f7820d2e9,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6b0d1494-5e31-45c7-a1c2-4c9f7820d2e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-rabbit-init-59zfn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c65286fab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 identity=33629 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-rabbit-init-59zfn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c65286fab9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3001 identity=33629 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-rabbit-init-59zfn subsys=endpoint level=info msg="Successful endpoint creation" containerID=c65286fab9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3001 identity=33629 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-rabbit-init-59zfn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c65286fab9 endpointID=3001 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-59zfn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6b0d1494-5e31-45c7-a1c2-4c9f7820d2e9 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=6b0d1494-5e31-45c7-a1c2-4c9f7820d2e9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c65286fab9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3001 identity=33629 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-rabbit-init-59zfn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 24aad1a3-f043-4e6d-b61e-41be987f0ad1 default }" containerID=ef515cfc3b590e4b2fe648608bfb9ebf2253c7183e8b296584c8d1c8c5207723 datapathConfiguration="&{false false false false false }" interface=lxccd95eadf09c9 k8sPodName=openstack/keystone-domain-manage-q8lpd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef515cfc3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-domain-manage-q8lpd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef515cfc3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=edf2f8a8-6a6a-40c4-b4ea-24336b942b79,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=edf2f8a8-6a6a-40c4-b4ea-24336b942b79,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-domain-manage-q8lpd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=edf2f8a8-6a6a-40c4-b4ea-24336b942b79;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=edf2f8a8-6a6a-40c4-b4ea-24336b942b79;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef515cfc3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identity=10290 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=edf2f8a8-6a6a-40c4-b4ea-24336b942b79,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=edf2f8a8-6a6a-40c4-b4ea-24336b942b79,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-domain-manage-q8lpd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef515cfc3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identity=10290 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-domain-manage-q8lpd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ef515cfc3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=76 identity=10290 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-domain-manage-q8lpd subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef515cfc3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=76 identity=10290 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-domain-manage-q8lpd subsys=daemon level=info msg="Delete endpoint request" containerID=ef515cfc3b endpointID=76 k8sNamespace=openstack k8sPodName=keystone-domain-manage-q8lpd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=edf2f8a8-6a6a-40c4-b4ea-24336b942b79 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=edf2f8a8-6a6a-40c4-b4ea-24336b942b79 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ef515cfc3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=76 identity=10290 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-domain-manage-q8lpd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 1fac08ef-d532-49c6-8f87-60fcebb6c08f default }" containerID=aa984589cf89370ec9ef3332e14b54b29ce0f83e30ab28f8f0d065c92038eb57 datapathConfiguration="&{false false false false false }" interface=lxc81c0649b4622 k8sPodName=openstack/keystone-bootstrap-xzn28 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa984589cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1349 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-bootstrap-xzn28 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa984589cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1349 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a0ca4a5d-89e0-489a-b2d6-8cde70956aab,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=a0ca4a5d-89e0-489a-b2d6-8cde70956aab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-bootstrap-xzn28 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a0ca4a5d-89e0-489a-b2d6-8cde70956aab;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=a0ca4a5d-89e0-489a-b2d6-8cde70956aab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa984589cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1349 identity=51771 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a0ca4a5d-89e0-489a-b2d6-8cde70956aab,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=a0ca4a5d-89e0-489a-b2d6-8cde70956aab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-bootstrap-xzn28 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=aa984589cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1349 identity=51771 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-bootstrap-xzn28 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa984589cf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1349 identity=51771 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-bootstrap-xzn28 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa984589cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1349 identity=51771 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-bootstrap-xzn28 subsys=daemon level=info msg="Delete endpoint request" containerID=aa984589cf endpointID=1349 k8sNamespace=openstack k8sPodName=keystone-bootstrap-xzn28 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a0ca4a5d-89e0-489a-b2d6-8cde70956aab k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=a0ca4a5d-89e0-489a-b2d6-8cde70956aab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=aa984589cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1349 identity=51771 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-bootstrap-xzn28 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 44aea8f6-e142-4e8f-bc9a-d9231c71b0cb default }" containerID=87fadcee827a64c5de437a047d6f6c3b3d278300e2711cdf550d5c47ea5e24b3 datapathConfiguration="&{false false false false false }" interface=lxc07cd86aa2533 k8sPodName=local-path-storage/helper-pod-create-pvc-c867681d-d049-4570-8bcb-81aa029b7209 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87fadcee82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3419 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c867681d-d049-4570-8bcb-81aa029b7209 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87fadcee82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3419 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c867681d-d049-4570-8bcb-81aa029b7209 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87fadcee82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3419 identity=33583 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c867681d-d049-4570-8bcb-81aa029b7209 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87fadcee82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3419 identity=33583 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c867681d-d049-4570-8bcb-81aa029b7209 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=87fadcee82 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3419 identity=33583 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c867681d-d049-4570-8bcb-81aa029b7209 subsys=endpoint level=info msg="Successful endpoint creation" containerID=87fadcee82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3419 identity=33583 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c867681d-d049-4570-8bcb-81aa029b7209 subsys=daemon level=info msg="Delete endpoint request" containerID=87fadcee82 endpointID=3419 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c867681d-d049-4570-8bcb-81aa029b7209 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=87fadcee82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3419 identity=33583 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c867681d-d049-4570-8bcb-81aa029b7209 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 8600eb5c-41e1-4838-a445-d5d3c73d0fc3 default }" containerID=b33e0098d159e2173f91f21a156bac3e3c98479a6d4a0617873c85b24d31b222 datapathConfiguration="&{false false false false false }" interface=lxc39023db6748b k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b33e0098d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b33e0098d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b33e0098d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 identity=55452 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b33e0098d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 identity=55452 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b33e0098d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=781 identity=55452 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b33e0098d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=781 identity=55452 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.185 a8e36705-9c5b-4e13-92a2-7e499dac76d1 default }" containerID=c1591ab9fab9ec591260916c7c1adfcdd907495f204c1b4042bb8fcbbcb0e90a datapathConfiguration="&{false false false false false }" interface=lxc8f101133e25b k8sPodName=openstack/barbican-api-5d6f47f859-2npsm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1591ab9fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1291 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-api-5d6f47f859-2npsm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1591ab9fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1291 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-api-5d6f47f859-2npsm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1591ab9fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1291 identity=58086 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-api-5d6f47f859-2npsm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1591ab9fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1291 identity=58086 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-api-5d6f47f859-2npsm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.153 e857556e-a26b-4218-96dd-a58421caebf5 default }" containerID=6e5dfc6c463d6dadf1c1a57e2db5909c35b222b431e7ee041719c766ba017ea3 datapathConfiguration="&{false false false false false }" interface=lxc19086c656b56 k8sPodName=openstack/barbican-db-init-84m7g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e5dfc6c46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-init-84m7g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e5dfc6c46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9cd0c948-2da4-495b-be2b-47c8b37c87d1,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=9cd0c948-2da4-495b-be2b-47c8b37c87d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-init-84m7g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9cd0c948-2da4-495b-be2b-47c8b37c87d1;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=9cd0c948-2da4-495b-be2b-47c8b37c87d1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e5dfc6c46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identity=14567 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9cd0c948-2da4-495b-be2b-47c8b37c87d1,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=9cd0c948-2da4-495b-be2b-47c8b37c87d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-init-84m7g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e5dfc6c46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identity=14567 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-init-84m7g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1591ab9fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1291 identity=58086 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-api-5d6f47f859-2npsm subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1591ab9fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1291 identity=58086 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-api-5d6f47f859-2npsm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6e5dfc6c46 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2945 identity=14567 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-init-84m7g subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e5dfc6c46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2945 identity=14567 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-init-84m7g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6e5dfc6c46 endpointID=2945 k8sNamespace=openstack k8sPodName=barbican-db-init-84m7g subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9cd0c948-2da4-495b-be2b-47c8b37c87d1 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=9cd0c948-2da4-495b-be2b-47c8b37c87d1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6e5dfc6c46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2945 identity=14567 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-init-84m7g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 0663a10d-ba6d-4ab0-86e1-06c508acc91d default }" containerID=79af5328d760783b2fd39c4cd1667270f2d6b717a0ddb6f8c16ab5769b95c647 datapathConfiguration="&{false false false false false }" interface=lxc18ea6c5bcba1 k8sPodName=openstack/barbican-db-sync-rc8xx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79af5328d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-db-sync-rc8xx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79af5328d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1c077244-d1b0-43bd-b97b-12b6dac970de,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=1c077244-d1b0-43bd-b97b-12b6dac970de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-db-sync-rc8xx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=79af5328d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-db-sync-rc8xx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1c077244-d1b0-43bd-b97b-12b6dac970de;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=1c077244-d1b0-43bd-b97b-12b6dac970de;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79af5328d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=49342 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1c077244-d1b0-43bd-b97b-12b6dac970de,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=1c077244-d1b0-43bd-b97b-12b6dac970de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-db-sync-rc8xx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79af5328d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=49342 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-db-sync-rc8xx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79af5328d7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1433 identity=49342 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-db-sync-rc8xx subsys=endpoint level=info msg="Successful endpoint creation" containerID=79af5328d7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1433 identity=49342 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-db-sync-rc8xx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=79af5328d7 endpointID=1433 k8sNamespace=openstack k8sPodName=barbican-db-sync-rc8xx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1c077244-d1b0-43bd-b97b-12b6dac970de k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=1c077244-d1b0-43bd-b97b-12b6dac970de k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=79af5328d7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1433 identity=49342 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/barbican-db-sync-rc8xx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 223fccee-1464-44bd-8b97-932c2c79781b default }" containerID=e6562ff1c4640920e8f90e2fd23fa1364bc4c78269eef23c987d1bd24414eb54 datapathConfiguration="&{false false false false false }" interface=lxc40432712c191 k8sPodName=openstack/barbican-rabbit-init-4dqp6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6562ff1c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-rabbit-init-4dqp6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6562ff1c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e92eb6c3-a80e-4ed5-a406-7209a4013823,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e92eb6c3-a80e-4ed5-a406-7209a4013823,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-rabbit-init-4dqp6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e92eb6c3-a80e-4ed5-a406-7209a4013823;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e92eb6c3-a80e-4ed5-a406-7209a4013823;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e6562ff1c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-rabbit-init-4dqp6 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e6562ff1c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identity=8589 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e92eb6c3-a80e-4ed5-a406-7209a4013823,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e92eb6c3-a80e-4ed5-a406-7209a4013823,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-rabbit-init-4dqp6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6562ff1c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identity=8589 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-rabbit-init-4dqp6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e6562ff1c4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=385 identity=8589 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-rabbit-init-4dqp6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6562ff1c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=385 identity=8589 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-rabbit-init-4dqp6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e6562ff1c4 endpointID=385 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-4dqp6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e92eb6c3-a80e-4ed5-a406-7209a4013823 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e92eb6c3-a80e-4ed5-a406-7209a4013823 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e6562ff1c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=385 identity=8589 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/barbican-rabbit-init-4dqp6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 d7006637-1915-4d5d-a558-fdf7f81e1e5f default }" containerID=a7fb21b153e52ad465553e47622b4a5a76a002524184b3d678b753e4f6120dd2 datapathConfiguration="&{false false false false false }" interface=lxcdcef6dab2236 k8sPodName=openstack/barbican-ks-service-x9bbh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7fb21b153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-x9bbh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7fb21b153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=65678d14-f701-4d07-902a-d13f78832e18,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=65678d14-f701-4d07-902a-d13f78832e18,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-x9bbh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=65678d14-f701-4d07-902a-d13f78832e18;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=65678d14-f701-4d07-902a-d13f78832e18;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7fb21b153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 identity=36402 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=65678d14-f701-4d07-902a-d13f78832e18,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=65678d14-f701-4d07-902a-d13f78832e18,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-x9bbh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7fb21b153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 identity=36402 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-x9bbh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a7fb21b153 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2206 identity=36402 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-x9bbh subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7fb21b153 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2206 identity=36402 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-x9bbh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a7fb21b153 endpointID=2206 k8sNamespace=openstack k8sPodName=barbican-ks-service-x9bbh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=65678d14-f701-4d07-902a-d13f78832e18 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=65678d14-f701-4d07-902a-d13f78832e18 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a7fb21b153 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2206 identity=36402 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-x9bbh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 ae5ada71-b312-4b8b-b6f0-2758fc6eee7c default }" containerID=f0156e1eb2be7fe6b4aa149b9bcdf5d7c5c90d142afaa3e1470db4571a9b60b8 datapathConfiguration="&{false false false false false }" interface=lxcbaa335648307 k8sPodName=openstack/barbican-ks-endpoints-t5rtb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0156e1eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-endpoints-t5rtb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0156e1eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7c33b737-571c-413a-90aa-f825a812b036,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7c33b737-571c-413a-90aa-f825a812b036,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-endpoints-t5rtb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f0156e1eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-endpoints-t5rtb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=7c33b737-571c-413a-90aa-f825a812b036;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=7c33b737-571c-413a-90aa-f825a812b036;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0156e1eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 identity=25733 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7c33b737-571c-413a-90aa-f825a812b036,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7c33b737-571c-413a-90aa-f825a812b036,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-endpoints-t5rtb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0156e1eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 identity=25733 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-endpoints-t5rtb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f0156e1eb2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=861 identity=25733 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-endpoints-t5rtb subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0156e1eb2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=861 identity=25733 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-endpoints-t5rtb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036417682308222975 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=f0156e1eb2 endpointID=861 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-t5rtb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=7c33b737-571c-413a-90aa-f825a812b036 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=7c33b737-571c-413a-90aa-f825a812b036 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f0156e1eb2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=861 identity=25733 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-endpoints-t5rtb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 606c5b70-f8cf-4907-a210-54d25e19ae70 default }" containerID=17648832aa75bbaa454b6a22ec05a3ee3c6a2255249efb3059a377dda1628ba2 datapathConfiguration="&{false false false false false }" interface=lxc24831fa64f1b k8sPodName=openstack/barbican-ks-user-sxttt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17648832aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-sxttt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17648832aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=60b2b43d-de17-4038-9cf2-12e24ff445d9,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=60b2b43d-de17-4038-9cf2-12e24ff445d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-sxttt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=60b2b43d-de17-4038-9cf2-12e24ff445d9;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=60b2b43d-de17-4038-9cf2-12e24ff445d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=17648832aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-sxttt line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=17648832aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=16706 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=60b2b43d-de17-4038-9cf2-12e24ff445d9,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=60b2b43d-de17-4038-9cf2-12e24ff445d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-sxttt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17648832aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=16706 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-sxttt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=17648832aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=187 identity=16706 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-sxttt subsys=endpoint level=info msg="Successful endpoint creation" containerID=17648832aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=187 identity=16706 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-sxttt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=17648832aa endpointID=187 k8sNamespace=openstack k8sPodName=barbican-ks-user-sxttt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=60b2b43d-de17-4038-9cf2-12e24ff445d9 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=60b2b43d-de17-4038-9cf2-12e24ff445d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=17648832aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=187 identity=16706 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-user-sxttt subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.134 9ee8bc35-9223-4e2e-a176-66aff44f6fd3 default }" containerID=bf1d2041dd77eaf59d00648f53cae284a1d3db4a1fc8e26255d44bd39075fbc9 datapathConfiguration="&{false false false false false }" interface=lxc8a9bcf7190e6 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p5xcs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf1d2041dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 ipv4=10.0.0.134 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p5xcs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf1d2041dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.134 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p5xcs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=bf1d2041dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 identity=45399 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.134 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p5xcs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf1d2041dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 identity=45399 ipv4=10.0.0.134 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p5xcs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf1d2041dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1495 identity=45399 ipv4=10.0.0.134 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p5xcs subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf1d2041dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1495 identity=45399 ipv4=10.0.0.134 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p5xcs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.98 8f97cbea-28d6-4fd1-820f-919cb79b3bdb default }" containerID=7ce0de2a7dfcd59235ae39e83008f4a8328e5f37cc83596cc416e8e3087d256d datapathConfiguration="&{false false false false false }" interface=lxcc76c4bb47a8e k8sPodName=openstack/rook-ceph-detect-version-p4jp2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ce0de2a7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1601 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rook-ceph-detect-version-p4jp2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ce0de2a7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1601 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=84e30295-40fe-4d65-aea5-1056f01e4b0b,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=84e30295-40fe-4d65-aea5-1056f01e4b0b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rook-ceph-detect-version-p4jp2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7ce0de2a7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1601 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rook-ceph-detect-version-p4jp2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=84e30295-40fe-4d65-aea5-1056f01e4b0b;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=84e30295-40fe-4d65-aea5-1056f01e4b0b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ce0de2a7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1601 identity=14767 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=84e30295-40fe-4d65-aea5-1056f01e4b0b,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=84e30295-40fe-4d65-aea5-1056f01e4b0b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rook-ceph-detect-version-p4jp2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ce0de2a7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1601 identity=14767 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rook-ceph-detect-version-p4jp2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ce0de2a7d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1601 identity=14767 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rook-ceph-detect-version-p4jp2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ce0de2a7d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1601 identity=14767 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rook-ceph-detect-version-p4jp2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7ce0de2a7d endpointID=1601 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-p4jp2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=84e30295-40fe-4d65-aea5-1056f01e4b0b k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=84e30295-40fe-4d65-aea5-1056f01e4b0b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=7ce0de2a7d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1601 identity=14767 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rook-ceph-detect-version-p4jp2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 bda66b75-9c5b-4903-958c-20f11022ca92 default }" containerID=dc733b37f1e0bf06c8af2e399a3e9d1b9f7681021f000b4735ab4eb821e3f5d2 datapathConfiguration="&{false false false false false }" interface=lxcdd82a682886f k8sPodName=openstack/ceph-object-controller-detect-version-mrq4r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc733b37f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=637 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrq4r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc733b37f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=637 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=5cbbd6f0-a356-4090-87c7-26493a3987b2,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=5cbbd6f0-a356-4090-87c7-26493a3987b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrq4r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=5cbbd6f0-a356-4090-87c7-26493a3987b2;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=5cbbd6f0-a356-4090-87c7-26493a3987b2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=dc733b37f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=637 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.29 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrq4r line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=dc733b37f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=637 identity=13200 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=5cbbd6f0-a356-4090-87c7-26493a3987b2,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=5cbbd6f0-a356-4090-87c7-26493a3987b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrq4r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc733b37f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=637 identity=13200 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrq4r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc733b37f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=637 identity=13200 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrq4r subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc733b37f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=637 identity=13200 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrq4r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dc733b37f1 endpointID=637 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-mrq4r subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=5cbbd6f0-a356-4090-87c7-26493a3987b2 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=5cbbd6f0-a356-4090-87c7-26493a3987b2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=dc733b37f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=637 identity=13200 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrq4r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 56761d00-fcc6-43fe-a651-19daa9a72f26 default }" containerID=d1b0c6811e2d4f9e35a3ef3ab8d2a32403f936754804bafd495927ff71ede81f datapathConfiguration="&{false false false false false }" interface=lxc7d06e925249f k8sPodName=local-path-storage/helper-pod-create-pvc-84ab013d-2370-4035-9d6e-9bf4ba4242e9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1b0c6811e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3748 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84ab013d-2370-4035-9d6e-9bf4ba4242e9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1b0c6811e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3748 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84ab013d-2370-4035-9d6e-9bf4ba4242e9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d1b0c6811e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3748 identity=33583 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84ab013d-2370-4035-9d6e-9bf4ba4242e9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1b0c6811e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3748 identity=33583 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84ab013d-2370-4035-9d6e-9bf4ba4242e9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1b0c6811e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3748 identity=33583 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84ab013d-2370-4035-9d6e-9bf4ba4242e9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1b0c6811e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3748 identity=33583 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84ab013d-2370-4035-9d6e-9bf4ba4242e9 subsys=daemon level=info msg="Delete endpoint request" containerID=d1b0c6811e endpointID=3748 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-84ab013d-2370-4035-9d6e-9bf4ba4242e9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d1b0c6811e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3748 identity=33583 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84ab013d-2370-4035-9d6e-9bf4ba4242e9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 ced21c13-1e79-4e10-be79-472dc749c0da default }" containerID=7e7a211e8bb03a6691835ffd44b45237d38ec27279ebb7e470b1560209dd2549 datapathConfiguration="&{false false false false false }" interface=lxc4a271eb51188 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e7a211e8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e7a211e8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e7a211e8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 identity=56581 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e7a211e8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 identity=56581 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7e7a211e8b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1416 identity=56581 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e7a211e8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1416 identity=56581 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.132 ab21c067-f308-4518-a014-78483817fe70 default }" containerID=91fbc1b769946b926424ff3b6bea09938569001dfb6a4afa4da5442f9cd80a4d datapathConfiguration="&{false false false false false }" interface=lxc528cef17ae2f k8sPodName=openstack/glance-db-init-zk24z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91fbc1b769 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-db-init-zk24z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91fbc1b769 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=dfac4f93-84be-4537-8bdb-db3989250f7b,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=dfac4f93-84be-4537-8bdb-db3989250f7b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-db-init-zk24z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=91fbc1b769 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-db-init-zk24z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=dfac4f93-84be-4537-8bdb-db3989250f7b;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=dfac4f93-84be-4537-8bdb-db3989250f7b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91fbc1b769 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 identity=5729 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=dfac4f93-84be-4537-8bdb-db3989250f7b,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=dfac4f93-84be-4537-8bdb-db3989250f7b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-db-init-zk24z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91fbc1b769 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 identity=5729 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-db-init-zk24z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=91fbc1b769 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1230 identity=5729 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-db-init-zk24z subsys=endpoint level=info msg="Successful endpoint creation" containerID=91fbc1b769 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1230 identity=5729 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-db-init-zk24z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=91fbc1b769 endpointID=1230 k8sNamespace=openstack k8sPodName=glance-db-init-zk24z subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=dfac4f93-84be-4537-8bdb-db3989250f7b k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=dfac4f93-84be-4537-8bdb-db3989250f7b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=91fbc1b769 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1230 identity=5729 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-db-init-zk24z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 9a1c5068-9070-46c7-bbc4-0f1c62c11ebf default }" containerID=027c969f659919fbcf4d99c23cd422a08be58feed0b55214c0b4b0c48d240f25 datapathConfiguration="&{false false false false false }" interface=lxc763c422d2704 k8sPodName=openstack/glance-db-sync-dd6m6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=027c969f65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2754 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-db-sync-dd6m6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=027c969f65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2754 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d4d07044-3ad4-46be-b040-8e2c431b2a04,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=d4d07044-3ad4-46be-b040-8e2c431b2a04,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-db-sync-dd6m6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d4d07044-3ad4-46be-b040-8e2c431b2a04;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=d4d07044-3ad4-46be-b040-8e2c431b2a04;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=027c969f65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2754 identity=28881 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d4d07044-3ad4-46be-b040-8e2c431b2a04,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=d4d07044-3ad4-46be-b040-8e2c431b2a04,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-db-sync-dd6m6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=027c969f65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2754 identity=28881 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-db-sync-dd6m6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=027c969f65 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2754 identity=28881 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-db-sync-dd6m6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=027c969f65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2754 identity=28881 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-db-sync-dd6m6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.8 083a0131-ce40-4ccf-b13b-147e2eb54b75 default }" containerID=2dac545137beebacf46ba889d7e2301e54cfbebdaad36e58a24e2e162a31626d datapathConfiguration="&{false false false false false }" interface=lxc8d7374f86d1c k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hnzmh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2dac545137 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hnzmh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2dac545137 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hnzmh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2dac545137 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identity=8577 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hnzmh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2dac545137 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identity=8577 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hnzmh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 dd577610-f3a2-4518-94e9-b2c6265bb377 default }" containerID=bebb380a4b962611407b0e72c6a0e19f5a21fc0782639f5b8bddfff280e66f30 datapathConfiguration="&{false false false false false }" interface=lxc17ae19dd84c0 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vsrzp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bebb380a4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vsrzp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bebb380a4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vsrzp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bebb380a4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 identity=5387 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vsrzp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bebb380a4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 identity=5387 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vsrzp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2dac545137 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=316 identity=8577 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hnzmh subsys=endpoint level=info msg="Successful endpoint creation" containerID=2dac545137 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=316 identity=8577 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hnzmh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bebb380a4b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3280 identity=5387 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vsrzp subsys=endpoint level=info msg="Successful endpoint creation" containerID=bebb380a4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3280 identity=5387 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vsrzp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=027c969f65 endpointID=2754 k8sNamespace=openstack k8sPodName=glance-db-sync-dd6m6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d4d07044-3ad4-46be-b040-8e2c431b2a04 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=d4d07044-3ad4-46be-b040-8e2c431b2a04 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=027c969f65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2754 identity=28881 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-db-sync-dd6m6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 9cdbfabf-669f-48fb-b2e0-0edb41f41100 default }" containerID=e9ba0040d63cb27a181a0f24a0beefe27012ab8e65d8ae858759fde85208f127 datapathConfiguration="&{false false false false false }" interface=lxc6d305cda0d87 k8sPodName=openstack/glance-rabbit-init-8f6j7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9ba0040d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2167 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-rabbit-init-8f6j7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9ba0040d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2167 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2bb88bf8-ef16-4d82-814a-1e79352c937a,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2bb88bf8-ef16-4d82-814a-1e79352c937a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-rabbit-init-8f6j7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2bb88bf8-ef16-4d82-814a-1e79352c937a;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2bb88bf8-ef16-4d82-814a-1e79352c937a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e9ba0040d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2167 identity=4140 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2bb88bf8-ef16-4d82-814a-1e79352c937a,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2bb88bf8-ef16-4d82-814a-1e79352c937a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-rabbit-init-8f6j7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9ba0040d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2167 identity=4140 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-rabbit-init-8f6j7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9ba0040d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2167 identity=4140 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-rabbit-init-8f6j7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9ba0040d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2167 identity=4140 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-rabbit-init-8f6j7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e9ba0040d6 endpointID=2167 k8sNamespace=openstack k8sPodName=glance-rabbit-init-8f6j7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2bb88bf8-ef16-4d82-814a-1e79352c937a k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2bb88bf8-ef16-4d82-814a-1e79352c937a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e9ba0040d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2167 identity=4140 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-rabbit-init-8f6j7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 2ede7e88-a932-4189-9f56-078e25e0eacb default }" containerID=a97c1d4f660db0ea25111ffca2bb9c1bcc0dbff64f79e29c00d0b5e190dca39e datapathConfiguration="&{false false false false false }" interface=lxca2bcd378daa4 k8sPodName=openstack/glance-ks-service-l2fw7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a97c1d4f66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2167 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-service-l2fw7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a97c1d4f66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2167 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=222a08a1-ce8a-4fd7-b0f8-362f60730549,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=222a08a1-ce8a-4fd7-b0f8-362f60730549,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-service-l2fw7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=222a08a1-ce8a-4fd7-b0f8-362f60730549;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=222a08a1-ce8a-4fd7-b0f8-362f60730549;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a97c1d4f66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2167 identity=37091 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=222a08a1-ce8a-4fd7-b0f8-362f60730549,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=222a08a1-ce8a-4fd7-b0f8-362f60730549,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-service-l2fw7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a97c1d4f66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2167 identity=37091 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-service-l2fw7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a97c1d4f66 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2167 identity=37091 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-service-l2fw7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a97c1d4f66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2167 identity=37091 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-service-l2fw7 subsys=daemon level=info msg="Delete endpoint request" containerID=a97c1d4f66 endpointID=2167 k8sNamespace=openstack k8sPodName=glance-ks-service-l2fw7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=222a08a1-ce8a-4fd7-b0f8-362f60730549 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=222a08a1-ce8a-4fd7-b0f8-362f60730549 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a97c1d4f66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2167 identity=37091 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-service-l2fw7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 10b267cf-5652-40c5-84a0-c571031712b8 default }" containerID=5abcbcff6741efec89b6a752d0d22d30c02ac16da8f112efeb65850da3b030f4 datapathConfiguration="&{false false false false false }" interface=lxc5753d07ac38a k8sPodName=openstack/glance-ks-endpoints-vrww6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5abcbcff67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3730 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-endpoints-vrww6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5abcbcff67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3730 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2be4a182-f3b8-44c3-885e-c24304612895,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2be4a182-f3b8-44c3-885e-c24304612895,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-endpoints-vrww6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2be4a182-f3b8-44c3-885e-c24304612895;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=2be4a182-f3b8-44c3-885e-c24304612895;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5abcbcff67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3730 identity=12355 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2be4a182-f3b8-44c3-885e-c24304612895,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2be4a182-f3b8-44c3-885e-c24304612895,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-endpoints-vrww6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5abcbcff67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3730 identity=12355 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-endpoints-vrww6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5abcbcff67 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3730 identity=12355 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-endpoints-vrww6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5abcbcff67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3730 identity=12355 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-endpoints-vrww6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5abcbcff67 endpointID=3730 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-vrww6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2be4a182-f3b8-44c3-885e-c24304612895 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=2be4a182-f3b8-44c3-885e-c24304612895 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5abcbcff67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3730 identity=12355 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-endpoints-vrww6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 a6844618-85d6-4cb0-9a0a-59434193cfed default }" containerID=51051cbed1ec52f718f6fa53b25836d9ec1c6406df89f4cb41393148673bece7 datapathConfiguration="&{false false false false false }" interface=lxcf39cb88c89f4 k8sPodName=openstack/glance-ks-user-4hfzh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51051cbed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-user-4hfzh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51051cbed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=059cc2e6-b334-417b-af9f-12304ecd55d4,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=059cc2e6-b334-417b-af9f-12304ecd55d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-user-4hfzh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=51051cbed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-user-4hfzh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=059cc2e6-b334-417b-af9f-12304ecd55d4;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=059cc2e6-b334-417b-af9f-12304ecd55d4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51051cbed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identity=63216 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=059cc2e6-b334-417b-af9f-12304ecd55d4,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=059cc2e6-b334-417b-af9f-12304ecd55d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-user-4hfzh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51051cbed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identity=63216 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-user-4hfzh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51051cbed1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=697 identity=63216 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-user-4hfzh subsys=endpoint level=info msg="Successful endpoint creation" containerID=51051cbed1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=697 identity=63216 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-user-4hfzh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=51051cbed1 endpointID=697 k8sNamespace=openstack k8sPodName=glance-ks-user-4hfzh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=059cc2e6-b334-417b-af9f-12304ecd55d4 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=059cc2e6-b334-417b-af9f-12304ecd55d4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=51051cbed1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=697 identity=63216 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-user-4hfzh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 2fce5d30-d69c-4926-846d-ee4d61e4753e default }" containerID=714b8dd502606b17d6669fba55f0c85d174e948e96c4b041953b9d0e9f005488 datapathConfiguration="&{false false false false false }" interface=lxc4d1b58442102 k8sPodName=openstack/glance-metadefs-load-pzklw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=714b8dd502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-pzklw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=714b8dd502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=79ad74d1-6224-4802-bdc8-1f84a3557520,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=79ad74d1-6224-4802-bdc8-1f84a3557520,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-pzklw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=714b8dd502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-pzklw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=79ad74d1-6224-4802-bdc8-1f84a3557520;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=79ad74d1-6224-4802-bdc8-1f84a3557520;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=714b8dd502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identity=6435 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=79ad74d1-6224-4802-bdc8-1f84a3557520,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=79ad74d1-6224-4802-bdc8-1f84a3557520,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-pzklw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=714b8dd502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identity=6435 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-pzklw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=714b8dd502 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=553 identity=6435 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-pzklw subsys=endpoint level=info msg="Successful endpoint creation" containerID=714b8dd502 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=553 identity=6435 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-pzklw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=714b8dd502 endpointID=553 k8sNamespace=openstack k8sPodName=glance-metadefs-load-pzklw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=79ad74d1-6224-4802-bdc8-1f84a3557520 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=79ad74d1-6224-4802-bdc8-1f84a3557520 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=714b8dd502 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=553 identity=6435 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-pzklw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 34a5413b-c343-4b15-af91-b7bb65c19b1f default }" containerID=46441d6310185bd8fa617dc7c03755f61ffd2bbb4e2846cead44d609b17ba6ad datapathConfiguration="&{false false false false false }" interface=lxcbafd17463982 k8sPodName=openstack/glance-storage-init-md9jj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46441d6310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2852 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-storage-init-md9jj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46441d6310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2852 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f2d31fe2-e197-48a4-a47d-7be107f32d29,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=f2d31fe2-e197-48a4-a47d-7be107f32d29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-storage-init-md9jj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f2d31fe2-e197-48a4-a47d-7be107f32d29;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=f2d31fe2-e197-48a4-a47d-7be107f32d29;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46441d6310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2852 identity=46556 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f2d31fe2-e197-48a4-a47d-7be107f32d29,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=f2d31fe2-e197-48a4-a47d-7be107f32d29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-storage-init-md9jj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46441d6310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2852 identity=46556 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-storage-init-md9jj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46441d6310 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2852 identity=46556 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-storage-init-md9jj subsys=endpoint level=info msg="Successful endpoint creation" containerID=46441d6310 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2852 identity=46556 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-storage-init-md9jj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=46441d6310 endpointID=2852 k8sNamespace=openstack k8sPodName=glance-storage-init-md9jj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f2d31fe2-e197-48a4-a47d-7be107f32d29 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=f2d31fe2-e197-48a4-a47d-7be107f32d29 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=46441d6310 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2852 identity=46556 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-storage-init-md9jj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 e2a7b08d-26d1-4d25-bc8b-9d6ec00a48b4 default }" containerID=0e8768c75c0d6286404a7c9ef0514b726dae1d261f54f9a3cc1523c4e4230cbd datapathConfiguration="&{false false false false false }" interface=lxc7bb3c29ac607 k8sPodName=openstack/glance-api-5c59b8f9f8-b278l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e8768c75c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-api-5c59b8f9f8-b278l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e8768c75c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-api-5c59b8f9f8-b278l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e8768c75c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identity=15351 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-api-5c59b8f9f8-b278l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e8768c75c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identity=15351 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-api-5c59b8f9f8-b278l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e8768c75c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=182 identity=15351 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-api-5c59b8f9f8-b278l subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e8768c75c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=182 identity=15351 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-api-5c59b8f9f8-b278l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.192 790a6f2b-2870-4a22-8d85-faf73be4b398 default }" containerID=ba191241a4c17e48ab1f76321a670a7718190a70fa0b02a834592604d2ebaca9 datapathConfiguration="&{false false false false false }" interface=lxce73f9a15b393 k8sPodName=openstack/staffeln-conductor-759b8f865c-85w2t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba191241a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/staffeln-conductor-759b8f865c-85w2t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba191241a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/staffeln-conductor-759b8f865c-85w2t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba191241a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identity=5180 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/staffeln-conductor-759b8f865c-85w2t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba191241a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identity=5180 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/staffeln-conductor-759b8f865c-85w2t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 eeb44060-2d3c-4e5c-a8dd-d362e0bd4108 default }" containerID=8429c824172b72879267a4449d9953b05363f70d203fa032a05d0fc9432ae549 datapathConfiguration="&{false false false false false }" interface=lxc0d6254adbfef k8sPodName=openstack/staffeln-api-5d8b9f5746-snmsd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8429c82417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-api-5d8b9f5746-snmsd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8429c82417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-api-5d8b9f5746-snmsd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.78 915359ff-2661-44e3-b7af-73f00a0506a8 default }" containerID=3ea0457f996221d82905d41d86ba7fa6b8ba831585d14d7a064006d3ec6f0507 datapathConfiguration="&{false false false false false }" interface=lxcee8219c3a5a4 k8sPodName=openstack/staffeln-db-init-lcglz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ea0457f99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-db-init-lcglz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ea0457f99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=03ca3afd-4009-4a96-9b4c-80b0ba5e0d78,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=03ca3afd-4009-4a96-9b4c-80b0ba5e0d78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-db-init-lcglz subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=8429c82417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identity=4322 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-api-5d8b9f5746-snmsd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8429c82417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identity=4322 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-api-5d8b9f5746-snmsd subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=03ca3afd-4009-4a96-9b4c-80b0ba5e0d78;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=03ca3afd-4009-4a96-9b4c-80b0ba5e0d78;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ea0457f99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 identity=42899 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=03ca3afd-4009-4a96-9b4c-80b0ba5e0d78,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=03ca3afd-4009-4a96-9b4c-80b0ba5e0d78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-db-init-lcglz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ea0457f99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 identity=42899 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-db-init-lcglz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba191241a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2215 identity=5180 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/staffeln-conductor-759b8f865c-85w2t subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba191241a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2215 identity=5180 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/staffeln-conductor-759b8f865c-85w2t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8429c82417 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=893 identity=4322 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-api-5d8b9f5746-snmsd subsys=endpoint level=info msg="Successful endpoint creation" containerID=8429c82417 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=893 identity=4322 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-api-5d8b9f5746-snmsd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3ea0457f99 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1256 identity=42899 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-db-init-lcglz subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ea0457f99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1256 identity=42899 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-db-init-lcglz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3ea0457f99 endpointID=1256 k8sNamespace=openstack k8sPodName=staffeln-db-init-lcglz subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=03ca3afd-4009-4a96-9b4c-80b0ba5e0d78 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=03ca3afd-4009-4a96-9b4c-80b0ba5e0d78 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=3ea0457f99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1256 identity=42899 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-db-init-lcglz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 346f87fb-6cbf-4aa6-9f50-09858f6dadd8 default }" containerID=ae46b4a17325759b2f2db072ebe17d7927d9ef671556deea2675416a177eea63 datapathConfiguration="&{false false false false false }" interface=lxc330530a41cbb k8sPodName=openstack/staffeln-db-sync-clpv6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae46b4a173 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-db-sync-clpv6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae46b4a173 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0f06108b-7596-4033-8859-b0806674737c,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=0f06108b-7596-4033-8859-b0806674737c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-db-sync-clpv6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=0f06108b-7596-4033-8859-b0806674737c;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=0f06108b-7596-4033-8859-b0806674737c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae46b4a173 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identity=20024 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0f06108b-7596-4033-8859-b0806674737c,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=0f06108b-7596-4033-8859-b0806674737c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-db-sync-clpv6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae46b4a173 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identity=20024 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-db-sync-clpv6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ae46b4a173 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1744 identity=20024 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-db-sync-clpv6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae46b4a173 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1744 identity=20024 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-db-sync-clpv6 subsys=daemon