level=info msg="Memory available for map entries (0.003% of 67421646848B): 168554117B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="811.338µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="61.571µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="891.97µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="9.42µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=107.244946ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.19µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="17.19µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="55.181µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="54.411µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="80.312µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="376.198µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.89µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=13.572252ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.205498ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="34.831µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="38.061µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="193.905µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="83.782µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="82.062µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=40.892279ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="124.093µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="15.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.27µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.227.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.091735ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="13.78µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.889334ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.62µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.600802ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.35µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.35µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.26µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="22.11µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="16.56µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="24.33µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="194.006µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.87µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.6µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="480.751µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="622.924µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="934.63µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.291µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="318.737µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.227 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.227 ipAddr.ipv6="" k8sNodeIP=199.204.45.227 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.227" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.25" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.227" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.227} {CiliumInternalIP 10.0.0.25}] 10.0.0.0/24 [] [] 10.0.0.178 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:32843" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.61144552s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="14.94µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="11.92µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="35.02µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="3.08µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1195 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1195 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1195 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.756368491s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=307.361909ms file-path=/var/run/cilium/state/templates/8ca0cae172f28e1d4226d249af58496f118ea0a060ff19aa434d4ed392000f5c/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1195 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 833b7969-14b5-42c1-9a79-c6ec1a5cc539 default }" containerID=2616acfd27a953997b970c88f0e414bb447e95b3f685385e9653cd21b985fe5a datapathConfiguration="&{false false false false false }" interface=lxc8c9bec095592 k8sPodName=kube-system/coredns-7c96b6546b-8gmc4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2616acfd27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8gmc4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2616acfd27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8gmc4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 cafd1455-d942-4a6b-b291-7982fdfd18d9 default }" containerID=e4aaaedb9ddbe2e00450b01777222dcc93c4897e98419dbc2006dfc4afa32923 datapathConfiguration="&{false false false false false }" interface=lxc16c519885187 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-26lzp labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="New endpoint" containerID=e4aaaedb9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 ipv4=10.0.0.79 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-26lzp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4aaaedb9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=22f7ef5a-3191-430a-ac90-5538925847af,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=22f7ef5a-3191-430a-ac90-5538925847af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.79 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-26lzp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e4aaaedb9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.79 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-26lzp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2616acfd27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=52172 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8gmc4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2616acfd27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=52172 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8gmc4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=22f7ef5a-3191-430a-ac90-5538925847af;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=22f7ef5a-3191-430a-ac90-5538925847af;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4aaaedb9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=35483 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=22f7ef5a-3191-430a-ac90-5538925847af,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=22f7ef5a-3191-430a-ac90-5538925847af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.79 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-26lzp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4aaaedb9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=35483 ipv4=10.0.0.79 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-26lzp subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 ipv4=10.0.0.178 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identityLabels="reserved:health" ipv4=10.0.0.178 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identity=4 identityLabels="reserved:health" ipv4=10.0.0.178 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.090649984s file-path=/var/run/cilium/state/templates/3a12eb2e47d7c881f22ca280e78c0c671459c87f7919cc9d0172c75befc86b70/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=2616acfd27 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=31 identity=52172 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8gmc4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2616acfd27 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=31 identity=52172 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8gmc4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e4aaaedb9d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=449 identity=35483 ipv4=10.0.0.79 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-26lzp subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4aaaedb9d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=449 identity=35483 ipv4=10.0.0.79 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-26lzp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=821 identity=4 ipv4=10.0.0.178 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e4aaaedb9d endpointID=449 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-26lzp subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=22f7ef5a-3191-430a-ac90-5538925847af k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=22f7ef5a-3191-430a-ac90-5538925847af k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=e4aaaedb9d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=449 identity=35483 ipv4=10.0.0.79 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-26lzp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 d86936c6-c377-463d-a834-50ae743fa5c0 default }" containerID=c691c0eec782592cdddf8dc082e35688b5d87c2c1ef77105d90f410c19c46b0a datapathConfiguration="&{false false false false false }" interface=lxcee30a0eb98b1 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9587w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c691c0eec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 ipv4=10.0.0.96 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9587w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c691c0eec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.96 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9587w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c691c0eec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.96 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9587w line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c691c0eec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 identity=872 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.96 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9587w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c691c0eec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 identity=872 ipv4=10.0.0.96 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9587w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c691c0eec7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2092 identity=872 ipv4=10.0.0.96 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9587w subsys=endpoint level=info msg="Successful endpoint creation" containerID=c691c0eec7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2092 identity=872 ipv4=10.0.0.96 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9587w subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1195 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01195 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01195 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01195 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01195:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1195 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.184 b8fdd7f9-a4b1-462f-8e9f-b8d9440b4137 default }" containerID=90cff7ea1ee37d2d0a59f169fe58be39585135fb22bc5b92e166eecd5d75e288 datapathConfiguration="&{false false false false false }" interface=lxc1da96a6bcef8 k8sPodName=kube-system/coredns-67659f764b-ctbjr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90cff7ea1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 ipv4=10.0.0.184 ipv6= k8sPodName=kube-system/coredns-67659f764b-ctbjr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90cff7ea1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.184 ipv6= k8sPodName=kube-system/coredns-67659f764b-ctbjr subsys=endpoint level=info msg="Identity of endpoint changed" containerID=90cff7ea1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identity=52172 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.184 ipv6= k8sPodName=kube-system/coredns-67659f764b-ctbjr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90cff7ea1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identity=52172 ipv4=10.0.0.184 ipv6= k8sPodName=kube-system/coredns-67659f764b-ctbjr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 74deb215-6bde-4f5f-886c-645462f90839 default }" containerID=a00d2be283a871d9b82a65ff440f0042ea10cc5ece785693bd6f1f7b2b4a3a25 datapathConfiguration="&{false false false false false }" interface=lxc154e5ca39ff3 k8sPodName=kube-system/coredns-67659f764b-vzmkj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a00d2be283 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 ipv4=10.0.0.174 ipv6= k8sPodName=kube-system/coredns-67659f764b-vzmkj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a00d2be283 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.174 ipv6= k8sPodName=kube-system/coredns-67659f764b-vzmkj subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a00d2be283 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identity=52172 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.174 ipv6= k8sPodName=kube-system/coredns-67659f764b-vzmkj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a00d2be283 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identity=52172 ipv4=10.0.0.174 ipv6= k8sPodName=kube-system/coredns-67659f764b-vzmkj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=90cff7ea1e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=285 identity=52172 ipv4=10.0.0.184 ipv6= k8sPodName=kube-system/coredns-67659f764b-ctbjr subsys=endpoint level=info msg="Successful endpoint creation" containerID=90cff7ea1e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=285 identity=52172 ipv4=10.0.0.184 ipv6= k8sPodName=kube-system/coredns-67659f764b-ctbjr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a00d2be283 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2044 identity=52172 ipv4=10.0.0.174 ipv6= k8sPodName=kube-system/coredns-67659f764b-vzmkj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a00d2be283 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2044 identity=52172 ipv4=10.0.0.174 ipv6= k8sPodName=kube-system/coredns-67659f764b-vzmkj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.55 ab2dff11-40fd-475b-813d-c3479928e43e default }" containerID=2877d34c424fe72a71dd8e43daaa8a11792c56ef8b818c5f0e89870e01a23336 datapathConfiguration="&{false false false false false }" interface=lxc98f28d1d33e1 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jrhh8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2877d34c42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2489 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jrhh8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2877d34c42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2489 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jrhh8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2877d34c42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2489 identity=4194 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jrhh8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2877d34c42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2489 identity=4194 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jrhh8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2877d34c42 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2489 identity=4194 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jrhh8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2877d34c42 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2489 identity=4194 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jrhh8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2616acfd27 endpointID=31 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-8gmc4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=2616acfd27 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=31 identity=52172 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8gmc4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 33e82456-00ff-48f0-9c9d-5e02bb99e744 default }" containerID=68f64d77369b76af8953adf23651ac6088a56340d6ca3c0136fb718c92ac67ea datapathConfiguration="&{false false false false false }" interface=lxcf0714ed7ba5e k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2cn9w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68f64d7736 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 ipv4=10.0.0.166 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2cn9w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 fc7f99b7-e02b-4714-b674-194cd7bde8d3 default }" containerID=dcf1a3534f7f023ada06cbfbb6f98aacf150d88da27bd0214b165a1cb424e43d datapathConfiguration="&{false false false false false }" interface=lxcb28ffcbc1fc0 k8sPodName=cert-manager/cert-manager-75c4c745bc-qj9df labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.244 8e1561f5-5e78-49c1-91f6-277b33b62e48 default }" containerID=b1d5ce011060b204eb18fb27ee08c5cb5c5cf7dd0473c4f3c72455a9c24c852d datapathConfiguration="&{false false false false false }" interface=lxcb54a694c0fe6 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-h7rqn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dcf1a3534f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qj9df subsys=endpoint level=info msg="New endpoint" containerID=b1d5ce0110 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 ipv4=10.0.0.244 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-h7rqn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68f64d7736 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.166 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2cn9w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=b1d5ce0110 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.244 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-h7rqn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dcf1a3534f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qj9df subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68f64d7736 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identity=2426 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.166 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2cn9w oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=68f64d7736 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identity=2426 ipv4=10.0.0.166 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2cn9w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dcf1a3534f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qj9df line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=b1d5ce0110 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-h7rqn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=b1d5ce0110 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=717 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.244 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-h7rqn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b1d5ce0110 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=717 ipv4=10.0.0.244 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-h7rqn subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dcf1a3534f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identity=3963 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qj9df oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dcf1a3534f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identity=3963 ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qj9df subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68f64d7736 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=788 identity=2426 ipv4=10.0.0.166 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2cn9w subsys=endpoint level=info msg="Successful endpoint creation" containerID=68f64d7736 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=788 identity=2426 ipv4=10.0.0.166 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2cn9w subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dcf1a3534f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=548 identity=3963 ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qj9df subsys=endpoint level=info msg="Successful endpoint creation" containerID=dcf1a3534f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=548 identity=3963 ipv4=10.0.0.35 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qj9df subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b1d5ce0110 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=34 identity=717 ipv4=10.0.0.244 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-h7rqn subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1d5ce0110 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=34 identity=717 ipv4=10.0.0.244 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-h7rqn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.234 ebb27061-c637-4f1f-85bd-2fd4af2f3509 default }" containerID=b1b5b2627bcaa4b38ba058b245915a3608eff39fcc8e81cb23ba14896864b705 datapathConfiguration="&{false false false false false }" interface=lxc4b23619809cf k8sPodName=cert-manager/cert-manager-startupapicheck-kbjf4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1b5b2627b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1941 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kbjf4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b1b5b2627b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1941 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=5797a86f-bf5e-4047-a69e-f79a2d5e8e2c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=5797a86f-bf5e-4047-a69e-f79a2d5e8e2c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kbjf4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=5797a86f-bf5e-4047-a69e-f79a2d5e8e2c;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=5797a86f-bf5e-4047-a69e-f79a2d5e8e2c;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b1b5b2627b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1941 identity=9606 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=5797a86f-bf5e-4047-a69e-f79a2d5e8e2c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=5797a86f-bf5e-4047-a69e-f79a2d5e8e2c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kbjf4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b1b5b2627b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1941 identity=9606 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kbjf4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b1b5b2627b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1941 identity=9606 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kbjf4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1b5b2627b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1941 identity=9606 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kbjf4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b1b5b2627b endpointID=1941 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-kbjf4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=5797a86f-bf5e-4047-a69e-f79a2d5e8e2c k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=5797a86f-bf5e-4047-a69e-f79a2d5e8e2c k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=b1b5b2627b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1941 identity=9606 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kbjf4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 d71909de-2d16-408a-b230-9e65956fd84d default }" containerID=0de6c1d96c3938ed931a710b7ee841d70e84930c201a325797f440153b622cb0 datapathConfiguration="&{false false false false false }" interface=lxce0aae2637e6d k8sPodName=ingress-nginx/ingress-nginx-admission-create-fsflg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0de6c1d96c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fsflg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0de6c1d96c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4d3a597c-1a07-4a2b-b09b-3d03e28c555c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=4d3a597c-1a07-4a2b-b09b-3d03e28c555c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fsflg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=4d3a597c-1a07-4a2b-b09b-3d03e28c555c;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=4d3a597c-1a07-4a2b-b09b-3d03e28c555c;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0de6c1d96c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identity=30889 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4d3a597c-1a07-4a2b-b09b-3d03e28c555c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=4d3a597c-1a07-4a2b-b09b-3d03e28c555c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fsflg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0de6c1d96c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identity=30889 ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fsflg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0de6c1d96c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=925 identity=30889 ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fsflg subsys=endpoint level=info msg="Successful endpoint creation" containerID=0de6c1d96c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=925 identity=30889 ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fsflg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0de6c1d96c endpointID=925 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-fsflg subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=4d3a597c-1a07-4a2b-b09b-3d03e28c555c k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=4d3a597c-1a07-4a2b-b09b-3d03e28c555c k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=0de6c1d96c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=925 identity=30889 ipv4=10.0.0.172 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fsflg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 c736c1b3-2c72-451a-ad6e-f822bb2cdc7f default }" containerID=75948bf66a33bdce790e971d7035f7b4ca5cfc31bcb96806d7fb98ac57f4f9a7 datapathConfiguration="&{false false false false false }" interface=lxc62b05af3386d k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hm4cv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75948bf66a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 ipv4=10.0.0.92 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hm4cv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75948bf66a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.92 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hm4cv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=75948bf66a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.92 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hm4cv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75948bf66a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identity=23354 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.92 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hm4cv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75948bf66a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identity=23354 ipv4=10.0.0.92 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hm4cv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=75948bf66a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2323 identity=23354 ipv4=10.0.0.92 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hm4cv subsys=endpoint level=info msg="Successful endpoint creation" containerID=75948bf66a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2323 identity=23354 ipv4=10.0.0.92 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hm4cv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.203 a5f702ee-6687-44cc-93ce-f8094f6187e4 default }" containerID=a21c72fafdb6893f583a73eb3e57347167a51d53b7039d4b27513388e38d61fa datapathConfiguration="&{false false false false false }" interface=lxc97d94e49c0a4 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bjqs9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a21c72fafd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 ipv4=10.0.0.203 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bjqs9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a21c72fafd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2e9b7c6c-8931-451e-aa36-7eb02663b933,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=2e9b7c6c-8931-451e-aa36-7eb02663b933,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.203 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bjqs9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=2e9b7c6c-8931-451e-aa36-7eb02663b933;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=2e9b7c6c-8931-451e-aa36-7eb02663b933;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a21c72fafd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identity=54675 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2e9b7c6c-8931-451e-aa36-7eb02663b933,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=2e9b7c6c-8931-451e-aa36-7eb02663b933,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.203 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bjqs9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a21c72fafd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identity=54675 ipv4=10.0.0.203 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bjqs9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a21c72fafd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=603 identity=54675 ipv4=10.0.0.203 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bjqs9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a21c72fafd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=603 identity=54675 ipv4=10.0.0.203 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bjqs9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a21c72fafd endpointID=603 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-bjqs9 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=2e9b7c6c-8931-451e-aa36-7eb02663b933 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=2e9b7c6c-8931-451e-aa36-7eb02663b933 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=a21c72fafd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=603 identity=54675 ipv4=10.0.0.203 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bjqs9 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=6762eb0c-8e27-45f8-823e-169656bdf682] Description:}]" policyAddRequest=f45c8c1d-b2d7-45bf-b5a7-ff7841f3ff72 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f45c8c1d-b2d7-45bf-b5a7-ff7841f3ff72 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=084d9fec-f707-4e16-aff0-be8b04a48a68] Description:}]" policyAddRequest=be8f997c-1c11-43ce-a866-887d68c78ff0 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=be8f997c-1c11-43ce-a866-887d68c78ff0 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.4 76563391-ffec-4697-bbfb-ecbca7d354c5 default }" containerID=4a1d618527116ad4b9ebbefb54b44324585ecb4f0a5537b7a741d71a6951b359 datapathConfiguration="&{false false false false false }" interface=lxce79b2f9f55c9 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4l955 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a1d618527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4l955 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a1d618527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4l955 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a1d618527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identity=22182 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4l955 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a1d618527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identity=22182 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4l955 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4a1d618527 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3158 identity=22182 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4l955 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a1d618527 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3158 identity=22182 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4l955 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.186 f6b10232-a23a-4603-9ab2-83736b87e695 default }" containerID=7529c30c49b15835542a453216ca251d3c4f996f7bb672449811fcfbcae596f8 datapathConfiguration="&{false false false false false }" interface=lxcd44191411671 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8b526 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7529c30c49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8b526 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7529c30c49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8b526 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7529c30c49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identity=10314 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8b526 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7529c30c49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identity=10314 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8b526 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7529c30c49 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=867 identity=10314 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8b526 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7529c30c49 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=867 identity=10314 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-8b526 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.128 006b6505-c6c4-4890-b933-818ea52e5268 default }" containerID=2e6c12e5ded7ebf8b352afa823b72b8768294d94bf788260e545f6b10c0f62e8 datapathConfiguration="&{false false false false false }" interface=lxcd13d1a5d96ee k8sPodName=openstack/pxc-operator-69cb5bbdb9-b8rdw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e6c12e5de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2694 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-b8rdw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e6c12e5de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2694 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-b8rdw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e6c12e5de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2694 identity=5176 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-b8rdw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e6c12e5de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2694 identity=5176 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-b8rdw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2e6c12e5de datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2694 identity=5176 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-b8rdw subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e6c12e5de datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2694 identity=5176 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-b8rdw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.208 e992384f-f274-4cf8-b012-4d2f85ee6796 default }" containerID=1d293854096130b4b717fea3b8f38f97970c1b7c266c3df225ab8f6db2b2c2b7 datapathConfiguration="&{false false false false false }" interface=lxc8eca00ddde6b k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d29385409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d29385409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1d29385409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.208 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d29385409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identity=18862 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d29385409 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identity=18862 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d29385409 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2631 identity=18862 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d29385409 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2631 identity=18862 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.210 71e26654-1359-4d0a-befe-0bd954ba7148 default }" containerID=953436eef29c4918af1ae77f7c807203420a65241a6a0532cce928c8205df075 datapathConfiguration="&{false false false false false }" interface=lxc06afa8c6a4cb k8sPodName=local-path-storage/helper-pod-create-pvc-24d35817-f133-48ec-9b63-0609e0e22c7a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=953436eef2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d35817-f133-48ec-9b63-0609e0e22c7a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=953436eef2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d35817-f133-48ec-9b63-0609e0e22c7a subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=953436eef2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=995 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d35817-f133-48ec-9b63-0609e0e22c7a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=953436eef2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=995 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d35817-f133-48ec-9b63-0609e0e22c7a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=953436eef2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=653 identity=995 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d35817-f133-48ec-9b63-0609e0e22c7a subsys=endpoint level=info msg="Successful endpoint creation" containerID=953436eef2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=653 identity=995 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d35817-f133-48ec-9b63-0609e0e22c7a subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=953436eef2 endpointID=653 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-24d35817-f133-48ec-9b63-0609e0e22c7a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=953436eef2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=653 identity=995 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d35817-f133-48ec-9b63-0609e0e22c7a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 76dae89f-d041-4a43-9539-43b8cbacb379 default }" containerID=32c313b25aa3ee4643e1b2caafd1c9b9be8416bd79d45695aac7911a4ec75744 datapathConfiguration="&{false false false false false }" interface=lxc919963924c3d k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=32c313b25a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=32c313b25a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32c313b25a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=21500 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=32c313b25a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=21500 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=32c313b25a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=297 identity=21500 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=32c313b25a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=297 identity=21500 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=4412a601-e47e-45e5-8226-0d9b7be22d05] Description:}]" policyAddRequest=51e93f04-e30c-4954-9f5a-601cca01f707 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=51e93f04-e30c-4954-9f5a-601cca01f707 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.122 36bf9e96-1f29-48f7-adb2-0d06fd4dded0 default }" containerID=3bfcdc14f8fd42f3e17a9ff4f2fc92e1249b76419a2be23bda0d6972f577d274 datapathConfiguration="&{false false false false false }" interface=lxcccabef4cc4a3 k8sPodName=local-path-storage/helper-pod-create-pvc-a6e8f383-2847-416f-a206-dc9c9b4d09e1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bfcdc14f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=844 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6e8f383-2847-416f-a206-dc9c9b4d09e1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bfcdc14f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=844 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6e8f383-2847-416f-a206-dc9c9b4d09e1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bfcdc14f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=844 identity=995 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6e8f383-2847-416f-a206-dc9c9b4d09e1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bfcdc14f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=844 identity=995 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6e8f383-2847-416f-a206-dc9c9b4d09e1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3bfcdc14f8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=844 identity=995 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6e8f383-2847-416f-a206-dc9c9b4d09e1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bfcdc14f8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=844 identity=995 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6e8f383-2847-416f-a206-dc9c9b4d09e1 subsys=daemon level=info msg="Delete endpoint request" containerID=3bfcdc14f8 endpointID=844 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a6e8f383-2847-416f-a206-dc9c9b4d09e1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3bfcdc14f8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=844 identity=995 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6e8f383-2847-416f-a206-dc9c9b4d09e1 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=9405e978-55c8-4010-9246-7fc30166d710] Description:}]" policyAddRequest=85f03dd6-d15a-4695-aedf-f76f3e47a588 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=85f03dd6-d15a-4695-aedf-f76f3e47a588 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.121 fb790e82-6299-4fb0-8957-e76441df30e2 default }" containerID=2014775835053513ba149a27838a1fc173c54612cd7068cde96540c3bfa3e384 datapathConfiguration="&{false false false false false }" interface=lxc0d953fc8b37c k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2014775835 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2014775835 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2014775835 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 identity=6191 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2014775835 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 identity=6191 ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2014775835 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=781 identity=6191 ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2014775835 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=781 identity=6191 ipv4=10.0.0.121 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.75 93b28020-c061-4130-ad93-7602e36ae610 default }" containerID=855d3a2bd04482a45fa1e1e5c088373945b06ae23f2a87e72e576872685e6b2c datapathConfiguration="&{false false false false false }" interface=lxc067fce6d8238 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=855d3a2bd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=855d3a2bd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=855d3a2bd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identity=10563 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=855d3a2bd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identity=10563 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=855d3a2bd0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=140 identity=10563 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=855d3a2bd0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=140 identity=10563 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010598292910573945 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.57 2828f7d9-7b63-4c56-83d8-638e603b0c1c default }" containerID=d7ef6b3b93505680cc24236ab91d0c0a18a353e4a7e1809495b09959844c41e4 datapathConfiguration="&{false false false false false }" interface=lxcd614ebf9157c k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5n6vg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7ef6b3b93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1371 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5n6vg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7ef6b3b93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1371 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5n6vg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d7ef6b3b93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1371 identity=19388 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5n6vg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7ef6b3b93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1371 identity=19388 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5n6vg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 ae4f2e60-3afd-4c7d-8c81-a39455940d01 default }" containerID=6f4009c42f0c2e7344b301b48d4972097469ba31104ff6b1a8e3054bc3854f58 datapathConfiguration="&{false false false false false }" interface=lxc9c3cd16e8491 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s9rnj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f4009c42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s9rnj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f4009c42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s9rnj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f4009c42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 identity=24628 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s9rnj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f4009c42f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 identity=24628 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s9rnj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7ef6b3b93 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1371 identity=19388 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5n6vg subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7ef6b3b93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1371 identity=19388 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5n6vg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6f4009c42f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2017 identity=24628 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s9rnj subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f4009c42f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2017 identity=24628 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s9rnj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.206 fd51e0be-1d9c-4668-b732-17b88076fe53 default }" containerID=b76cbae4b28c44575a04ee53cd8c99516f38b26cd598e43dde2260c57205dae0 datapathConfiguration="&{false false false false false }" interface=lxcfa6864f18622 k8sPodName=monitoring/node-feature-discovery-worker-dstj5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b76cbae4b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2964 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dstj5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b76cbae4b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2964 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dstj5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b76cbae4b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2964 identity=8422 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dstj5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b76cbae4b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2964 identity=8422 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dstj5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b76cbae4b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2964 identity=8422 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dstj5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b76cbae4b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2964 identity=8422 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dstj5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.144 896400db-f529-4825-b62e-fe0dd0f05fc2 default }" containerID=7d436cf3c0d6dec9d3d0fa93909e9326506407e5d7a1e2c8eaf61f801a339d36 datapathConfiguration="&{false false false false false }" interface=lxc6bc92ca7350a k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7b6z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d436cf3c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1955 ipv4=10.0.0.144 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7b6z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d436cf3c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1955 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.144 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7b6z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d436cf3c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1955 identity=26087 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.144 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7b6z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d436cf3c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1955 identity=26087 ipv4=10.0.0.144 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7b6z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d436cf3c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1955 identity=26087 ipv4=10.0.0.144 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7b6z subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d436cf3c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1955 identity=26087 ipv4=10.0.0.144 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7b6z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1195 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01195 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01195 subsys=bpf level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01195 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01195:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1195 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 db59ec80-fbbe-470b-b689-675af380fd22 default }" containerID=1d434bf17863c790f9e9829284785d4bc979dfa0298bf539e742b190c5d470f5 datapathConfiguration="&{false false false false false }" interface=lxc216f68d5a578 k8sPodName=monitoring/kube-prometheus-stack-admission-create-kvlqh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d434bf178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1875 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kvlqh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d434bf178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1875 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=b5074b00-41dc-4199-9feb-bad1d5593213,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=b5074b00-41dc-4199-9feb-bad1d5593213,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kvlqh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=b5074b00-41dc-4199-9feb-bad1d5593213;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=b5074b00-41dc-4199-9feb-bad1d5593213;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d434bf178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1875 identity=44754 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=b5074b00-41dc-4199-9feb-bad1d5593213,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=b5074b00-41dc-4199-9feb-bad1d5593213,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kvlqh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1d434bf178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1875 identity=44754 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kvlqh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d434bf178 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1875 identity=44754 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kvlqh subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d434bf178 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1875 identity=44754 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kvlqh subsys=daemon level=info msg="Delete endpoint request" containerID=1d434bf178 endpointID=1875 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-kvlqh subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=b5074b00-41dc-4199-9feb-bad1d5593213 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=b5074b00-41dc-4199-9feb-bad1d5593213 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=1d434bf178 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1875 identity=44754 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kvlqh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 6cc1f8a1-3b45-49f7-ab17-f1c10f513f22 default }" containerID=a891dcad0c000de87503ce529b466fd8ead293bb02f8a20afd983a1ac40b133f datapathConfiguration="&{false false false false false }" interface=lxc505b0d04f542 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-t6c52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a891dcad0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-t6c52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a891dcad0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-t6c52 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a891dcad0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 identity=36706 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-t6c52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a891dcad0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 identity=36706 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-t6c52 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 a80f7a1b-2017-4ff5-b9d8-a065fb800f76 default }" containerID=34938f9275923af55cf0c7b809b11ca046e3fed7007ff3c927f9236b5408d9dc datapathConfiguration="&{false false false false false }" interface=lxc0bc569427b4c k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5mf2p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34938f9275 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5mf2p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34938f9275 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5mf2p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34938f9275 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 identity=666 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5mf2p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34938f9275 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 identity=666 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5mf2p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a891dcad0c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1081 identity=36706 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-t6c52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a891dcad0c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1081 identity=36706 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-t6c52 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.28 a75794b5-60eb-464c-b7dd-96a65a278cb8 default }" containerID=148a22cdf734a8d597da1c035ff7303b1e6234cdc1d63ebacd1255c989d5ec39 datapathConfiguration="&{false false false false false }" interface=lxc25efa086bde2 k8sPodName=monitoring/kube-prometheus-stack-grafana-584d8fbf7b-td4hg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=148a22cdf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-584d8fbf7b-td4hg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=148a22cdf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-584d8fbf7b-td4hg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=148a22cdf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identity=7035 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-584d8fbf7b-td4hg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=148a22cdf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identity=7035 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-584d8fbf7b-td4hg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34938f9275 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1996 identity=666 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5mf2p subsys=endpoint level=info msg="Successful endpoint creation" containerID=34938f9275 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1996 identity=666 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5mf2p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=148a22cdf7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=561 identity=7035 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-584d8fbf7b-td4hg subsys=endpoint level=info msg="Successful endpoint creation" containerID=148a22cdf7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=561 identity=7035 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-584d8fbf7b-td4hg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 56ce6024-1324-40e4-9be1-1314b198fc99 default }" containerID=62228e14daa7589161bf50cc87b782bdff90685d3ac57ec92affcb97e459042e datapathConfiguration="&{false false false false false }" interface=lxc643ae8524031 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ccdk5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62228e14da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4041 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ccdk5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62228e14da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4041 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=f7c16307-bdcd-426c-8801-d40c8d7da357,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=f7c16307-bdcd-426c-8801-d40c8d7da357,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ccdk5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=f7c16307-bdcd-426c-8801-d40c8d7da357;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=f7c16307-bdcd-426c-8801-d40c8d7da357;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62228e14da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4041 identity=19316 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=f7c16307-bdcd-426c-8801-d40c8d7da357,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=f7c16307-bdcd-426c-8801-d40c8d7da357,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ccdk5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62228e14da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4041 identity=19316 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ccdk5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62228e14da datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4041 identity=19316 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ccdk5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=62228e14da datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4041 identity=19316 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ccdk5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=62228e14da endpointID=4041 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-ccdk5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=f7c16307-bdcd-426c-8801-d40c8d7da357 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=f7c16307-bdcd-426c-8801-d40c8d7da357 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=62228e14da datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4041 identity=19316 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ccdk5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 a2430609-f851-4c90-9872-eaad7fba8fb3 default }" containerID=f2e106bf15cb561d7006d0b73913afd7a04a79534c476e79eae66368b4126e35 datapathConfiguration="&{false false false false false }" interface=lxcdda578ada84f k8sPodName=local-path-storage/helper-pod-create-pvc-060330f9-39f2-45c1-9fd4-4a3df30e205e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2e106bf15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-060330f9-39f2-45c1-9fd4-4a3df30e205e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2e106bf15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-060330f9-39f2-45c1-9fd4-4a3df30e205e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2e106bf15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=995 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-060330f9-39f2-45c1-9fd4-4a3df30e205e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2e106bf15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=995 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-060330f9-39f2-45c1-9fd4-4a3df30e205e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2e106bf15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1094 identity=995 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-060330f9-39f2-45c1-9fd4-4a3df30e205e subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2e106bf15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1094 identity=995 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-060330f9-39f2-45c1-9fd4-4a3df30e205e subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.123 d3aaaa9b-ff14-4317-8cea-7715642c3d36 default }" containerID=7fd3b629a18c6370de97f10daadc704ffb24175bd41d0c091098de046272b4d3 datapathConfiguration="&{false false false false false }" interface=lxca18527d712c4 k8sPodName=local-path-storage/helper-pod-create-pvc-1b7a63f3-4123-4ba6-baa7-31541be1d41e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7fd3b629a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b7a63f3-4123-4ba6-baa7-31541be1d41e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7fd3b629a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b7a63f3-4123-4ba6-baa7-31541be1d41e subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7fd3b629a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identity=995 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b7a63f3-4123-4ba6-baa7-31541be1d41e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7fd3b629a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identity=995 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b7a63f3-4123-4ba6-baa7-31541be1d41e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7fd3b629a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=786 identity=995 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b7a63f3-4123-4ba6-baa7-31541be1d41e subsys=endpoint level=info msg="Successful endpoint creation" containerID=7fd3b629a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=786 identity=995 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b7a63f3-4123-4ba6-baa7-31541be1d41e subsys=daemon level=info msg="Delete endpoint request" containerID=7fd3b629a1 endpointID=786 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1b7a63f3-4123-4ba6-baa7-31541be1d41e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7fd3b629a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=786 identity=995 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b7a63f3-4123-4ba6-baa7-31541be1d41e subsys=endpoint level=info msg="Delete endpoint request" containerID=f2e106bf15 endpointID=1094 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-060330f9-39f2-45c1-9fd4-4a3df30e205e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f2e106bf15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1094 identity=995 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-060330f9-39f2-45c1-9fd4-4a3df30e205e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 05b92f1b-1a3e-40b7-81a0-9116a97c7e2b default }" containerID=385b56994ba105db04bb974e720c3376c1d283e47fe082fe6803be72e956ed2d datapathConfiguration="&{false false false false false }" interface=lxc679f1a34a048 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=385b56994b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1740 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=385b56994b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1740 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=385b56994b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1740 identity=40783 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=385b56994b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1740 identity=40783 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 5726751b-9521-4ec3-be54-66a64bf59e05 default }" containerID=88854ffa02af6070a1b9847ae6df39e1fd972936eb24b623005197b92b5994f1 datapathConfiguration="&{false false false false false }" interface=lxce7152ce57fac k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88854ffa02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2946 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88854ffa02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2946 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88854ffa02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2946 identity=49421 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88854ffa02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2946 identity=49421 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=385b56994b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1740 identity=40783 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=385b56994b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1740 identity=40783 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=88854ffa02 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2946 identity=49421 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=88854ffa02 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2946 identity=49421 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.93 620c026d-c97d-4461-a273-48bdd85eadac default }" containerID=931293d88cf46bc6959e98e77ac1af276e2caa38cbce8ee15093ba41b4ca875e datapathConfiguration="&{false false false false false }" interface=lxcd69a81dae320 k8sPodName=monitoring/loki-gateway-cf54cb88c-9fbb2 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.122 3d95238a-4b3b-4e92-8ae3-3a1a6a779df2 default }" containerID=a69b1a7641316b7dfba3347f9dea75d57f154a185d60d877b77454de459843ae datapathConfiguration="&{false false false false false }" interface=lxc3c8f567241d7 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=931293d88c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9fbb2 subsys=endpoint level=info msg="New endpoint" containerID=a69b1a7641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2530 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=931293d88c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9fbb2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=a69b1a7641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2530 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=931293d88c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 identity=1411 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9fbb2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=931293d88c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 identity=1411 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9fbb2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a69b1a7641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2530 identity=26318 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a69b1a7641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2530 identity=26318 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 183f12eb-f2fd-4e06-8e7d-757ee261d257 default }" containerID=3c173d8a3357549fb20a56bd5765505eb412a26900c30d6cf9fdfc5611e49c3f datapathConfiguration="&{false false false false false }" interface=lxce0e46f773fd0 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c173d8a33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c173d8a33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c173d8a33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identity=29453 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c173d8a33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identity=29453 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=931293d88c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2250 identity=1411 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9fbb2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=931293d88c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2250 identity=1411 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9fbb2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a69b1a7641 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2530 identity=26318 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a69b1a7641 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2530 identity=26318 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3c173d8a33 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1161 identity=29453 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c173d8a33 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1161 identity=29453 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.224 e8d43143-2249-40fd-8a37-e2f99d5b317e default }" containerID=0973a553f9184ca05d8bc97cb80220b214361f05fe3ca359313e08eeb9e42e97 datapathConfiguration="&{false false false false false }" interface=lxccf65307d9520 k8sPodName=local-path-storage/helper-pod-create-pvc-62cb2b54-a095-4fff-876c-824d6efbad08 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0973a553f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-62cb2b54-a095-4fff-876c-824d6efbad08 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0973a553f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-62cb2b54-a095-4fff-876c-824d6efbad08 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0973a553f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 identity=995 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-62cb2b54-a095-4fff-876c-824d6efbad08 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0973a553f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 identity=995 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-62cb2b54-a095-4fff-876c-824d6efbad08 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0973a553f9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3881 identity=995 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-62cb2b54-a095-4fff-876c-824d6efbad08 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0973a553f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3881 identity=995 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-62cb2b54-a095-4fff-876c-824d6efbad08 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.162 87cc5773-a260-4a90-b4ce-e78b22a8a754 default }" containerID=a07bf99e043cd3cd14dad4aecdb643b6c897704247c4512e203dfde92d1deb0a datapathConfiguration="&{false false false false false }" interface=lxc72ce74e7972f k8sPodName=monitoring/vector-qwxr2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a07bf99e04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3096 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/vector-qwxr2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a07bf99e04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3096 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/vector-qwxr2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a07bf99e04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3096 identity=59349 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/vector-qwxr2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a07bf99e04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3096 identity=59349 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/vector-qwxr2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a07bf99e04 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3096 identity=59349 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/vector-qwxr2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a07bf99e04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3096 identity=59349 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/vector-qwxr2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0973a553f9 endpointID=3881 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-62cb2b54-a095-4fff-876c-824d6efbad08 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0973a553f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3881 identity=995 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-62cb2b54-a095-4fff-876c-824d6efbad08 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 f1267eaa-d973-4841-a822-4091a8bde892 default }" containerID=30b8c9750a552672cc16298802dd6d3db8e7a5eb6585b2ea7a8fe5923f895586 datapathConfiguration="&{false false false false false }" interface=lxc8291eec2b325 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gpmgz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30b8c9750a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gpmgz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30b8c9750a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gpmgz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30b8c9750a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 identity=38622 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gpmgz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30b8c9750a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 identity=38622 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gpmgz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=30b8c9750a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2403 identity=38622 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gpmgz subsys=endpoint level=info msg="Successful endpoint creation" containerID=30b8c9750a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2403 identity=38622 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gpmgz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.95 440f5886-2a3f-4e95-8ba2-f0c3aebeaa9b default }" containerID=6a2e7f6bc3f9068145af8bdc12f58cfe21d32e36581920a3a8a84bef763da6bd datapathConfiguration="&{false false false false false }" interface=lxc0a5cb49eba0c k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a2e7f6bc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1845 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a2e7f6bc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1845 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a2e7f6bc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1845 identity=20170 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a2e7f6bc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1845 identity=20170 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a2e7f6bc3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1845 identity=20170 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a2e7f6bc3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1845 identity=20170 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.109 861ce00f-cbe9-4101-9e9e-24855dc10c6b default }" containerID=9bb9fb0f3a67a90c98c4165b49393228f058c4652ddffd46a5421d091116023c datapathConfiguration="&{false false false false false }" interface=lxcf680b79853fc k8sPodName=openstack/memcached-memcached-6479589586-nsqc5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9bb9fb0f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nsqc5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9bb9fb0f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nsqc5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9bb9fb0f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.109 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nsqc5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9bb9fb0f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 identity=2457 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nsqc5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9bb9fb0f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 identity=2457 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nsqc5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9bb9fb0f3a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1733 identity=2457 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nsqc5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9bb9fb0f3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1733 identity=2457 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nsqc5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.199 a8a6c800-dcd0-4b23-9c8e-251b744e907c default }" containerID=a09af320a0821461262b61055ed2bc9e285dd1f140d8c1d337e57e112855b728 datapathConfiguration="&{false false false false false }" interface=lxc3f8ebe263f67 k8sPodName=local-path-storage/helper-pod-create-pvc-c3e16e69-e6de-4e75-99a8-5245e74b5597 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a09af320a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c3e16e69-e6de-4e75-99a8-5245e74b5597 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a09af320a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c3e16e69-e6de-4e75-99a8-5245e74b5597 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a09af320a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=995 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c3e16e69-e6de-4e75-99a8-5245e74b5597 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a09af320a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=995 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c3e16e69-e6de-4e75-99a8-5245e74b5597 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a09af320a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=274 identity=995 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c3e16e69-e6de-4e75-99a8-5245e74b5597 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a09af320a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=274 identity=995 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c3e16e69-e6de-4e75-99a8-5245e74b5597 subsys=daemon level=info msg="Delete endpoint request" containerID=a09af320a0 endpointID=274 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c3e16e69-e6de-4e75-99a8-5245e74b5597 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a09af320a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=274 identity=995 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c3e16e69-e6de-4e75-99a8-5245e74b5597 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 e1bbecfd-ff57-470e-9462-8f1ec34e804b default }" containerID=94134cd6e2c2cdafc775e51a6310fd7708f271de9d7fe84aa87a7e1c25884367 datapathConfiguration="&{false false false false false }" interface=lxcf2c93e2ff9f4 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94134cd6e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94134cd6e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=94134cd6e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=94134cd6e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=18268 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94134cd6e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=18268 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94134cd6e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1094 identity=18268 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=94134cd6e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1094 identity=18268 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.132 e25ae401-435f-42b9-9a15-9bbfe8bc1b97 default }" containerID=3c6cbe911fccab82cd7995e727197b1c05ba769c13db491e5af12da2308dbb43 datapathConfiguration="&{false false false false false }" interface=lxcc55961aa82e9 k8sPodName=openstack/keystone-api-7854678d94-khdsv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c6cbe911f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-api-7854678d94-khdsv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c6cbe911f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-api-7854678d94-khdsv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c6cbe911f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identity=29442 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-api-7854678d94-khdsv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3c6cbe911f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identity=29442 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-api-7854678d94-khdsv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c6cbe911f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1390 identity=29442 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-api-7854678d94-khdsv subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c6cbe911f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1390 identity=29442 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-api-7854678d94-khdsv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.235 0376c308-e519-4fb1-ac33-15fd3915400f default }" containerID=11093081bb20f5fddad4a3e4b895f04a9713edb5fc2a340c1222d4518f9f6bb5 datapathConfiguration="&{false false false false false }" interface=lxc9e62bff96d24 k8sPodName=openstack/keystone-credential-setup-ngkkt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11093081bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2807 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-credential-setup-ngkkt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11093081bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2807 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3b1f7802-0fe9-4a77-b95e-2d2bb222ebec,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=3b1f7802-0fe9-4a77-b95e-2d2bb222ebec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-credential-setup-ngkkt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3b1f7802-0fe9-4a77-b95e-2d2bb222ebec;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=3b1f7802-0fe9-4a77-b95e-2d2bb222ebec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11093081bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2807 identity=55218 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3b1f7802-0fe9-4a77-b95e-2d2bb222ebec,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=3b1f7802-0fe9-4a77-b95e-2d2bb222ebec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-credential-setup-ngkkt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11093081bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2807 identity=55218 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-credential-setup-ngkkt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=11093081bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2807 identity=55218 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-credential-setup-ngkkt subsys=endpoint level=info msg="Successful endpoint creation" containerID=11093081bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2807 identity=55218 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-credential-setup-ngkkt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=11093081bb endpointID=2807 k8sNamespace=openstack k8sPodName=keystone-credential-setup-ngkkt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3b1f7802-0fe9-4a77-b95e-2d2bb222ebec k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=3b1f7802-0fe9-4a77-b95e-2d2bb222ebec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=11093081bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2807 identity=55218 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-credential-setup-ngkkt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 d9e07afc-84c5-4222-82b4-9d8b947f409f default }" containerID=e3da78ff369fc4dea7b5cb0d151570b1b18c43b7102106e4dea28e952d88c9c6 datapathConfiguration="&{false false false false false }" interface=lxc4e6c30f601ea k8sPodName=openstack/keystone-db-init-q4n64 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3da78ff36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-q4n64 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3da78ff36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b769818d-2fbc-4f15-90cd-296c9b50e974,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=b769818d-2fbc-4f15-90cd-296c9b50e974,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-q4n64 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e3da78ff36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-q4n64 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b769818d-2fbc-4f15-90cd-296c9b50e974;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=b769818d-2fbc-4f15-90cd-296c9b50e974;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3da78ff36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identity=27244 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b769818d-2fbc-4f15-90cd-296c9b50e974,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=b769818d-2fbc-4f15-90cd-296c9b50e974,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-q4n64 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3da78ff36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identity=27244 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-q4n64 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3da78ff36 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1082 identity=27244 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-q4n64 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3da78ff36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1082 identity=27244 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-q4n64 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e3da78ff36 endpointID=1082 k8sNamespace=openstack k8sPodName=keystone-db-init-q4n64 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b769818d-2fbc-4f15-90cd-296c9b50e974 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=b769818d-2fbc-4f15-90cd-296c9b50e974 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e3da78ff36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1082 identity=27244 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-q4n64 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 a4f688d0-e835-40cc-a29d-e615cc161b2d default }" containerID=1aabe63370934f08f5f4ca3f959e5a72dd575ac1c27f33918b7c1a6362041597 datapathConfiguration="&{false false false false false }" interface=lxc36a6535d6790 k8sPodName=openstack/keystone-fernet-setup-58hxq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1aabe63370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3691 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-58hxq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1aabe63370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3691 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5517d50e-aa37-4276-b7ff-46219911f5db,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5517d50e-aa37-4276-b7ff-46219911f5db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-58hxq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5517d50e-aa37-4276-b7ff-46219911f5db;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=5517d50e-aa37-4276-b7ff-46219911f5db;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1aabe63370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3691 identity=14842 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5517d50e-aa37-4276-b7ff-46219911f5db,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5517d50e-aa37-4276-b7ff-46219911f5db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-58hxq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1aabe63370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3691 identity=14842 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-58hxq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1aabe63370 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3691 identity=14842 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-58hxq subsys=endpoint level=info msg="Successful endpoint creation" containerID=1aabe63370 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3691 identity=14842 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-58hxq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1aabe63370 endpointID=3691 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-58hxq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5517d50e-aa37-4276-b7ff-46219911f5db k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=5517d50e-aa37-4276-b7ff-46219911f5db k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1aabe63370 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3691 identity=14842 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-58hxq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 bb8f2dc8-07b5-4ad9-8a23-980daf975895 default }" containerID=f208cefaaa764dee7320e7ca0a7641d53a57308092a510604d9049d6f7d1ef49 datapathConfiguration="&{false false false false false }" interface=lxce8d969c418dd k8sPodName=openstack/keystone-db-sync-5n7pp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f208cefaaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1356 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-5n7pp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f208cefaaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1356 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=43ef2258-92ed-4df8-b75c-3c19ce81d208,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=43ef2258-92ed-4df8-b75c-3c19ce81d208,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-5n7pp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=43ef2258-92ed-4df8-b75c-3c19ce81d208;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=43ef2258-92ed-4df8-b75c-3c19ce81d208;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f208cefaaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1356 identity=61573 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=43ef2258-92ed-4df8-b75c-3c19ce81d208,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=43ef2258-92ed-4df8-b75c-3c19ce81d208,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-5n7pp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f208cefaaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1356 identity=61573 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-5n7pp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f208cefaaa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1356 identity=61573 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-5n7pp subsys=endpoint level=info msg="Successful endpoint creation" containerID=f208cefaaa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1356 identity=61573 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-5n7pp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f208cefaaa endpointID=1356 k8sNamespace=openstack k8sPodName=keystone-db-sync-5n7pp subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=43ef2258-92ed-4df8-b75c-3c19ce81d208 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=43ef2258-92ed-4df8-b75c-3c19ce81d208 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f208cefaaa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1356 identity=61573 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-5n7pp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 a72336a2-de13-4f40-a295-cf0c794ea21f default }" containerID=d0b2c5e1b14bf97079c7c4db04530bec97b883cacf260106bdb088452a1276b3 datapathConfiguration="&{false false false false false }" interface=lxc163c3eeb7644 k8sPodName=openstack/keystone-rabbit-init-smgcw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0b2c5e1b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-rabbit-init-smgcw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0b2c5e1b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=db3d1a89-a946-4387-a4d0-8c9f23f3445e,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=db3d1a89-a946-4387-a4d0-8c9f23f3445e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-rabbit-init-smgcw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d0b2c5e1b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-rabbit-init-smgcw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=db3d1a89-a946-4387-a4d0-8c9f23f3445e;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=db3d1a89-a946-4387-a4d0-8c9f23f3445e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d0b2c5e1b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identity=37198 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=db3d1a89-a946-4387-a4d0-8c9f23f3445e,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=db3d1a89-a946-4387-a4d0-8c9f23f3445e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-rabbit-init-smgcw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0b2c5e1b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identity=37198 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-rabbit-init-smgcw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d0b2c5e1b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=270 identity=37198 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-rabbit-init-smgcw subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0b2c5e1b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=270 identity=37198 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-rabbit-init-smgcw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d0b2c5e1b1 endpointID=270 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-smgcw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=db3d1a89-a946-4387-a4d0-8c9f23f3445e k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=db3d1a89-a946-4387-a4d0-8c9f23f3445e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d0b2c5e1b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=270 identity=37198 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-rabbit-init-smgcw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 67922fb0-0fb7-4181-b374-6d37914fb43c default }" containerID=5a819a54f502bd8a4d558895d93322ffb786eeeabfb55a0670a293cbd6a356da datapathConfiguration="&{false false false false false }" interface=lxc867bb9d9b682 k8sPodName=openstack/keystone-domain-manage-57hfj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a819a54f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-domain-manage-57hfj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a819a54f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=86dc3695-dee6-4ab7-8777-823025651436,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=86dc3695-dee6-4ab7-8777-823025651436,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-domain-manage-57hfj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=86dc3695-dee6-4ab7-8777-823025651436;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=86dc3695-dee6-4ab7-8777-823025651436;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a819a54f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identity=12435 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=86dc3695-dee6-4ab7-8777-823025651436,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=86dc3695-dee6-4ab7-8777-823025651436,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-domain-manage-57hfj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a819a54f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identity=12435 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-domain-manage-57hfj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a819a54f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=677 identity=12435 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-domain-manage-57hfj subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a819a54f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=677 identity=12435 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-domain-manage-57hfj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5a819a54f5 endpointID=677 k8sNamespace=openstack k8sPodName=keystone-domain-manage-57hfj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=86dc3695-dee6-4ab7-8777-823025651436 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=86dc3695-dee6-4ab7-8777-823025651436 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5a819a54f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=677 identity=12435 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-domain-manage-57hfj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 d421d79e-14c4-42d8-baa6-265c875fd1f0 default }" containerID=bb67d49129ac2133245c1e8af234567129ed1144db45abe997fcb79900a8af77 datapathConfiguration="&{false false false false false }" interface=lxc771d81659160 k8sPodName=openstack/keystone-bootstrap-cmfsq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb67d49129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-bootstrap-cmfsq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb67d49129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e7e31505-3ca6-4fe7-ac72-ccae8a2ce475,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e7e31505-3ca6-4fe7-ac72-ccae8a2ce475,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-bootstrap-cmfsq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bb67d49129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-bootstrap-cmfsq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e7e31505-3ca6-4fe7-ac72-ccae8a2ce475;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=e7e31505-3ca6-4fe7-ac72-ccae8a2ce475;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb67d49129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 identity=59309 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e7e31505-3ca6-4fe7-ac72-ccae8a2ce475,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e7e31505-3ca6-4fe7-ac72-ccae8a2ce475,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-bootstrap-cmfsq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb67d49129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 identity=59309 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-bootstrap-cmfsq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb67d49129 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=388 identity=59309 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-bootstrap-cmfsq subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb67d49129 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=388 identity=59309 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-bootstrap-cmfsq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bb67d49129 endpointID=388 k8sNamespace=openstack k8sPodName=keystone-bootstrap-cmfsq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e7e31505-3ca6-4fe7-ac72-ccae8a2ce475 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=e7e31505-3ca6-4fe7-ac72-ccae8a2ce475 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=bb67d49129 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=388 identity=59309 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-bootstrap-cmfsq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 ffd1c09d-f5b4-41ee-8247-a8ed7cd0e90c default }" containerID=04b5356fc346647314670d961acb6826b0257b191452c10f7a9a0c5af76ebd13 datapathConfiguration="&{false false false false false }" interface=lxc4977af2256ee k8sPodName=local-path-storage/helper-pod-create-pvc-1c8e7e68-6057-4a08-a39b-8afb865e1575 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04b5356fc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1525 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c8e7e68-6057-4a08-a39b-8afb865e1575 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04b5356fc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1525 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c8e7e68-6057-4a08-a39b-8afb865e1575 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04b5356fc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1525 identity=995 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c8e7e68-6057-4a08-a39b-8afb865e1575 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04b5356fc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1525 identity=995 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c8e7e68-6057-4a08-a39b-8afb865e1575 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=04b5356fc3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1525 identity=995 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c8e7e68-6057-4a08-a39b-8afb865e1575 subsys=endpoint level=info msg="Successful endpoint creation" containerID=04b5356fc3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1525 identity=995 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c8e7e68-6057-4a08-a39b-8afb865e1575 subsys=daemon level=info msg="Delete endpoint request" containerID=04b5356fc3 endpointID=1525 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1c8e7e68-6057-4a08-a39b-8afb865e1575 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=04b5356fc3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1525 identity=995 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c8e7e68-6057-4a08-a39b-8afb865e1575 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 ab54930c-e763-4140-a350-708a979e0a16 default }" containerID=b1e1be4e1c62e45ef86199d803e44bac2dcdcf85817dd6f9ae064d9e931a604f datapathConfiguration="&{false false false false false }" interface=lxcb9ae0d92b209 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1e1be4e1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b1e1be4e1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b1e1be4e1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identity=457 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b1e1be4e1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identity=457 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b1e1be4e1c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=104 identity=457 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1e1be4e1c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=104 identity=457 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.182 4f38d058-a6d2-41c6-b03c-28149ca785e0 default }" containerID=4ab8e80a086281772207e0e03761223db005cbef61d84706eaf44709a691ac85 datapathConfiguration="&{false false false false false }" interface=lxc730b06ff30fd k8sPodName=openstack/barbican-api-59b5d559b6-mlpwn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ab8e80a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-api-59b5d559b6-mlpwn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ab8e80a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-api-59b5d559b6-mlpwn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ab8e80a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 identity=9029 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-api-59b5d559b6-mlpwn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ab8e80a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 identity=9029 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-api-59b5d559b6-mlpwn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.5 64ff4ca3-f9b6-499e-81e6-d23399808843 default }" containerID=c71c9a8866d3ab9dbe93c3877596b2dbf6d6ad2ed0bd68652681860636203f6f datapathConfiguration="&{false false false false false }" interface=lxcd3a9b91d8a93 k8sPodName=openstack/barbican-db-init-jhs4w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c71c9a8866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-db-init-jhs4w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c71c9a8866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8e4713c7-c94c-4933-b3ec-d552877b467e,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=8e4713c7-c94c-4933-b3ec-d552877b467e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-db-init-jhs4w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8e4713c7-c94c-4933-b3ec-d552877b467e;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=8e4713c7-c94c-4933-b3ec-d552877b467e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c71c9a8866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=26783 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8e4713c7-c94c-4933-b3ec-d552877b467e,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=8e4713c7-c94c-4933-b3ec-d552877b467e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-db-init-jhs4w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c71c9a8866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=26783 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-db-init-jhs4w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ab8e80a08 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2124 identity=9029 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-api-59b5d559b6-mlpwn subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ab8e80a08 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2124 identity=9029 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-api-59b5d559b6-mlpwn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c71c9a8866 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1535 identity=26783 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-db-init-jhs4w subsys=endpoint level=info msg="Successful endpoint creation" containerID=c71c9a8866 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1535 identity=26783 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-db-init-jhs4w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c71c9a8866 endpointID=1535 k8sNamespace=openstack k8sPodName=barbican-db-init-jhs4w subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8e4713c7-c94c-4933-b3ec-d552877b467e k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=8e4713c7-c94c-4933-b3ec-d552877b467e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c71c9a8866 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1535 identity=26783 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-db-init-jhs4w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 7476e81d-cae2-42bd-b572-9b74e3d88a85 default }" containerID=887522aa5c0a7905c4b9a01619561369591dfdc191ab5fc0a1fcfc19b314c77c datapathConfiguration="&{false false false false false }" interface=lxc770aaa98b895 k8sPodName=openstack/barbican-db-sync-cmgj4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=887522aa5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-db-sync-cmgj4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=887522aa5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=74b6ecac-3a7f-41ab-a647-a3f041b13227,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=74b6ecac-3a7f-41ab-a647-a3f041b13227,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-db-sync-cmgj4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=74b6ecac-3a7f-41ab-a647-a3f041b13227;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=74b6ecac-3a7f-41ab-a647-a3f041b13227;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=887522aa5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 identity=31672 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=74b6ecac-3a7f-41ab-a647-a3f041b13227,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=74b6ecac-3a7f-41ab-a647-a3f041b13227,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-db-sync-cmgj4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=887522aa5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 identity=31672 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-db-sync-cmgj4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=887522aa5c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=731 identity=31672 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-db-sync-cmgj4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=887522aa5c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=731 identity=31672 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-db-sync-cmgj4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=887522aa5c endpointID=731 k8sNamespace=openstack k8sPodName=barbican-db-sync-cmgj4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=74b6ecac-3a7f-41ab-a647-a3f041b13227 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=74b6ecac-3a7f-41ab-a647-a3f041b13227 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=887522aa5c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=731 identity=31672 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-db-sync-cmgj4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 5d2cddda-5501-4840-beff-9c4b104b3dbc default }" containerID=b29f7370b04e95d42fa7bfa896f25a4ec407f82cd08c67637ffc1246634066fa datapathConfiguration="&{false false false false false }" interface=lxccde275573cef k8sPodName=openstack/barbican-rabbit-init-nzh9b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b29f7370b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1878 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-nzh9b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b29f7370b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1878 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d40029cc-0da7-476f-91b9-efb4b2ab9f3d,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d40029cc-0da7-476f-91b9-efb4b2ab9f3d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-nzh9b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d40029cc-0da7-476f-91b9-efb4b2ab9f3d;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d40029cc-0da7-476f-91b9-efb4b2ab9f3d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b29f7370b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1878 identity=40420 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d40029cc-0da7-476f-91b9-efb4b2ab9f3d,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d40029cc-0da7-476f-91b9-efb4b2ab9f3d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-nzh9b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b29f7370b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1878 identity=40420 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-nzh9b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b29f7370b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1878 identity=40420 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-nzh9b subsys=endpoint level=info msg="Successful endpoint creation" containerID=b29f7370b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1878 identity=40420 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-nzh9b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b29f7370b0 endpointID=1878 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-nzh9b subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d40029cc-0da7-476f-91b9-efb4b2ab9f3d k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d40029cc-0da7-476f-91b9-efb4b2ab9f3d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b29f7370b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1878 identity=40420 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-rabbit-init-nzh9b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 4f73ed82-d705-4a2b-9982-a0de0fccd635 default }" containerID=b4964f1b741f32f0cee42f88af4ee646f6a4d8bb1d59e22b6e4d35d9fad01114 datapathConfiguration="&{false false false false false }" interface=lxc7ff2698fd32d k8sPodName=openstack/barbican-ks-service-ptbjx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4964f1b74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-service-ptbjx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4964f1b74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=248c90f7-49b1-437a-8cf3-ea22ed64e677,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=248c90f7-49b1-437a-8cf3-ea22ed64e677,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-service-ptbjx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=248c90f7-49b1-437a-8cf3-ea22ed64e677;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=248c90f7-49b1-437a-8cf3-ea22ed64e677;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4964f1b74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identity=44233 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=248c90f7-49b1-437a-8cf3-ea22ed64e677,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=248c90f7-49b1-437a-8cf3-ea22ed64e677,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-service-ptbjx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4964f1b74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identity=44233 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-service-ptbjx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b4964f1b74 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=452 identity=44233 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-service-ptbjx subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4964f1b74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=452 identity=44233 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-service-ptbjx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036123473155951144 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=b4964f1b74 endpointID=452 k8sNamespace=openstack k8sPodName=barbican-ks-service-ptbjx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=248c90f7-49b1-437a-8cf3-ea22ed64e677 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=248c90f7-49b1-437a-8cf3-ea22ed64e677 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b4964f1b74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=452 identity=44233 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-service-ptbjx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 68e966b4-9355-4cb5-84e2-d5d33af1543b default }" containerID=97e28ed0a1b99f7c488dc1b68f7422e918ec932c0d20202b028ff168e9420dcc datapathConfiguration="&{false false false false false }" interface=lxc98df9eacf53f k8sPodName=openstack/barbican-ks-endpoints-6gtwd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97e28ed0a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2618 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6gtwd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97e28ed0a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2618 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ec0de03a-40fb-4a5a-a54f-e1760c3b4e8b,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ec0de03a-40fb-4a5a-a54f-e1760c3b4e8b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6gtwd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ec0de03a-40fb-4a5a-a54f-e1760c3b4e8b;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=ec0de03a-40fb-4a5a-a54f-e1760c3b4e8b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=97e28ed0a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2618 identity=43402 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ec0de03a-40fb-4a5a-a54f-e1760c3b4e8b,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ec0de03a-40fb-4a5a-a54f-e1760c3b4e8b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6gtwd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97e28ed0a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2618 identity=43402 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6gtwd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=97e28ed0a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2618 identity=43402 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6gtwd subsys=endpoint level=info msg="Successful endpoint creation" containerID=97e28ed0a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2618 identity=43402 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6gtwd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=97e28ed0a1 endpointID=2618 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-6gtwd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ec0de03a-40fb-4a5a-a54f-e1760c3b4e8b k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=ec0de03a-40fb-4a5a-a54f-e1760c3b4e8b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=97e28ed0a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2618 identity=43402 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6gtwd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 32f71c8e-a0f5-4390-81c0-0e5a1a74e9d7 default }" containerID=1793fa08e9c6af6f4d05560cd35ec19e7d09eb81bb3e294d6f7194bff342c975 datapathConfiguration="&{false false false false false }" interface=lxce5a65a4dac63 k8sPodName=openstack/barbican-ks-user-99mht labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1793fa08e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-99mht subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1793fa08e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4ef7fb82-fd47-48ed-b94b-e692a8bb32b2,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=4ef7fb82-fd47-48ed-b94b-e692a8bb32b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-99mht subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1793fa08e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-99mht line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4ef7fb82-fd47-48ed-b94b-e692a8bb32b2;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=4ef7fb82-fd47-48ed-b94b-e692a8bb32b2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1793fa08e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 identity=980 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4ef7fb82-fd47-48ed-b94b-e692a8bb32b2,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=4ef7fb82-fd47-48ed-b94b-e692a8bb32b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-99mht oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1793fa08e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 identity=980 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-99mht subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1793fa08e9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2065 identity=980 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-99mht subsys=endpoint level=info msg="Successful endpoint creation" containerID=1793fa08e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2065 identity=980 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-99mht subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1793fa08e9 endpointID=2065 k8sNamespace=openstack k8sPodName=barbican-ks-user-99mht subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4ef7fb82-fd47-48ed-b94b-e692a8bb32b2 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=4ef7fb82-fd47-48ed-b94b-e692a8bb32b2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1793fa08e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2065 identity=980 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-99mht subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.27 15206f2e-b2ba-45a3-bb85-d27b2ab8d6fe default }" containerID=373847de413df4beef3c4184c64d475ad408beed7587c343c353662c689985a7 datapathConfiguration="&{false false false false false }" interface=lxc550e9e20ce16 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cr2f9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=373847de41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3198 ipv4=10.0.0.27 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cr2f9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=373847de41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3198 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.27 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cr2f9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=373847de41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3198 identity=8239 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.27 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cr2f9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=373847de41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3198 identity=8239 ipv4=10.0.0.27 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cr2f9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=373847de41 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3198 identity=8239 ipv4=10.0.0.27 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cr2f9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=373847de41 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3198 identity=8239 ipv4=10.0.0.27 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cr2f9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.123 40c8458a-84a1-4839-b11d-5bf8410b501b default }" containerID=81035361a175446ea3252b4b2455b10bc5aebb57011d5044e449ee26be55c6a6 datapathConfiguration="&{false false false false false }" interface=lxcaf5a8a745aa6 k8sPodName=openstack/rook-ceph-detect-version-tpwhj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81035361a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tpwhj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81035361a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=e6037c0e-d5da-49cc-9226-f55eca9194a6,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=e6037c0e-d5da-49cc-9226-f55eca9194a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tpwhj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=81035361a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tpwhj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=e6037c0e-d5da-49cc-9226-f55eca9194a6;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=e6037c0e-d5da-49cc-9226-f55eca9194a6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81035361a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 identity=24337 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=e6037c0e-d5da-49cc-9226-f55eca9194a6,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=e6037c0e-d5da-49cc-9226-f55eca9194a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tpwhj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81035361a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 identity=24337 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tpwhj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81035361a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1694 identity=24337 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tpwhj subsys=endpoint level=info msg="Successful endpoint creation" containerID=81035361a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1694 identity=24337 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tpwhj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=81035361a1 endpointID=1694 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-tpwhj subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=e6037c0e-d5da-49cc-9226-f55eca9194a6 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=e6037c0e-d5da-49cc-9226-f55eca9194a6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=81035361a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1694 identity=24337 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tpwhj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 419bce82-33dc-4dd6-9aec-3cd9314fc4c8 default }" containerID=d7a6d878eaca31cc2e9f03111c9db113a91e07771d119e4b41d2675ce09ff9a1 datapathConfiguration="&{false false false false false }" interface=lxc94b8336dfb63 k8sPodName=openstack/ceph-object-controller-detect-version-x6c2h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7a6d878ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3131 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6c2h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7a6d878ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3131 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=3c68f49d-306b-4b34-b8b5-ee96d990736e,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=3c68f49d-306b-4b34-b8b5-ee96d990736e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6c2h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=3c68f49d-306b-4b34-b8b5-ee96d990736e;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=3c68f49d-306b-4b34-b8b5-ee96d990736e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7a6d878ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3131 identity=42433 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=3c68f49d-306b-4b34-b8b5-ee96d990736e,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=3c68f49d-306b-4b34-b8b5-ee96d990736e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6c2h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7a6d878ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3131 identity=42433 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6c2h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7a6d878ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3131 identity=42433 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6c2h subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7a6d878ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3131 identity=42433 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6c2h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d7a6d878ea endpointID=3131 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-x6c2h subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=3c68f49d-306b-4b34-b8b5-ee96d990736e k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=3c68f49d-306b-4b34-b8b5-ee96d990736e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=d7a6d878ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3131 identity=42433 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6c2h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 e78c4ba4-d84a-49c2-977b-95fc9187f629 default }" containerID=eb0a02629a886bc27ad28ccbbe51db77eab2f68dd78d846bad48b293b24bf514 datapathConfiguration="&{false false false false false }" interface=lxc5259f0b843d5 k8sPodName=local-path-storage/helper-pod-create-pvc-824d835a-60be-461d-99ad-31de829bf5ee labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb0a02629a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=920 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-824d835a-60be-461d-99ad-31de829bf5ee subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb0a02629a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=920 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-824d835a-60be-461d-99ad-31de829bf5ee subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb0a02629a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=920 identity=995 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-824d835a-60be-461d-99ad-31de829bf5ee oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb0a02629a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=920 identity=995 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-824d835a-60be-461d-99ad-31de829bf5ee subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb0a02629a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=920 identity=995 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-824d835a-60be-461d-99ad-31de829bf5ee subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb0a02629a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=920 identity=995 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-824d835a-60be-461d-99ad-31de829bf5ee subsys=daemon level=info msg="Delete endpoint request" containerID=eb0a02629a endpointID=920 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-824d835a-60be-461d-99ad-31de829bf5ee subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=eb0a02629a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=920 identity=995 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-824d835a-60be-461d-99ad-31de829bf5ee subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 61b0969b-d5c2-4a8b-8223-1904dcf484f2 default }" containerID=cdf058af00757991aa2ce2df6b3a266eb526da3642733c8f54b20341cb2c3d45 datapathConfiguration="&{false false false false false }" interface=lxc15acd772fdb2 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cdf058af00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=513 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cdf058af00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=513 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=cdf058af00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=513 identity=9295 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cdf058af00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=513 identity=9295 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cdf058af00 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=513 identity=9295 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cdf058af00 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=513 identity=9295 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.5 95c51fc7-145c-48ce-836b-e7a3bd63d101 default }" containerID=029fc075d69e5aa8d7edd88ae52947dcd8e7b07a0f1dc56b449358e1c46822ae datapathConfiguration="&{false false false false false }" interface=lxc79b064ce82d8 k8sPodName=openstack/glance-db-init-79tfx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=029fc075d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3918 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-db-init-79tfx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=029fc075d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3918 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f5f7b06d-b11b-4b3d-99d1-189c94338925,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=f5f7b06d-b11b-4b3d-99d1-189c94338925,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-db-init-79tfx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f5f7b06d-b11b-4b3d-99d1-189c94338925;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=f5f7b06d-b11b-4b3d-99d1-189c94338925;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=029fc075d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3918 identity=19773 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f5f7b06d-b11b-4b3d-99d1-189c94338925,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=f5f7b06d-b11b-4b3d-99d1-189c94338925,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-db-init-79tfx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=029fc075d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3918 identity=19773 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-db-init-79tfx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=029fc075d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3918 identity=19773 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-db-init-79tfx subsys=endpoint level=info msg="Successful endpoint creation" containerID=029fc075d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3918 identity=19773 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-db-init-79tfx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=029fc075d6 endpointID=3918 k8sNamespace=openstack k8sPodName=glance-db-init-79tfx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f5f7b06d-b11b-4b3d-99d1-189c94338925 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=f5f7b06d-b11b-4b3d-99d1-189c94338925 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=029fc075d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3918 identity=19773 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-db-init-79tfx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 f9541c71-87f8-4006-817c-3d282b83f2ba default }" containerID=005bfcc7b6f108d78115a95f2d6a05671e9955a1f4a79d6dc39ff631a98e9750 datapathConfiguration="&{false false false false false }" interface=lxc729ae9f4e347 k8sPodName=openstack/glance-db-sync-4n8s8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=005bfcc7b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2653 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-db-sync-4n8s8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=005bfcc7b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2653 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4a95dc3c-2977-43c5-96cf-43eb71a5bc99,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=4a95dc3c-2977-43c5-96cf-43eb71a5bc99,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-db-sync-4n8s8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4a95dc3c-2977-43c5-96cf-43eb71a5bc99;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=4a95dc3c-2977-43c5-96cf-43eb71a5bc99;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=005bfcc7b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2653 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-db-sync-4n8s8 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=005bfcc7b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2653 identity=698 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4a95dc3c-2977-43c5-96cf-43eb71a5bc99,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=4a95dc3c-2977-43c5-96cf-43eb71a5bc99,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-db-sync-4n8s8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=005bfcc7b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2653 identity=698 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-db-sync-4n8s8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=005bfcc7b6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2653 identity=698 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-db-sync-4n8s8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=005bfcc7b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2653 identity=698 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-db-sync-4n8s8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.110 988220c1-33fb-4e1b-a892-d0f359900a82 default }" containerID=5f8861206126b091ec3d2da4e77807db97aff4f07388d9738caeca5ef3f8f247 datapathConfiguration="&{false false false false false }" interface=lxcf6c17d4aa1a5 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6k6zt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f88612061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6k6zt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f88612061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6k6zt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f88612061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identity=48716 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6k6zt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f88612061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identity=48716 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6k6zt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 340189c6-44b8-4aba-9a96-b8377da68c9f default }" containerID=23b3e736f3b9c7230aa56bf1495eaa935ecf5bb4f06d720e840ecea3ab42dc1f datapathConfiguration="&{false false false false false }" interface=lxc484c550b8185 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-j8wq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23b3e736f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1989 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-j8wq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23b3e736f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1989 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-j8wq5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23b3e736f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1989 identity=29836 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-j8wq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23b3e736f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1989 identity=29836 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-j8wq5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5f88612061 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=841 identity=48716 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6k6zt subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f88612061 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=841 identity=48716 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-6k6zt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=23b3e736f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1989 identity=29836 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-j8wq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=23b3e736f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1989 identity=29836 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-j8wq5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=005bfcc7b6 endpointID=2653 k8sNamespace=openstack k8sPodName=glance-db-sync-4n8s8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4a95dc3c-2977-43c5-96cf-43eb71a5bc99 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=4a95dc3c-2977-43c5-96cf-43eb71a5bc99 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=005bfcc7b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2653 identity=698 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-db-sync-4n8s8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 22481a8d-212a-42bb-b1af-f0e5d5824a46 default }" containerID=55d4863fc3e6769ef7e5a791ea53c777c51e3652b13b4c8ae730a1e708f5c899 datapathConfiguration="&{false false false false false }" interface=lxce79365fadef1 k8sPodName=openstack/glance-rabbit-init-g84s8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55d4863fc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2769 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-g84s8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55d4863fc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2769 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b867bc27-eb06-4077-b240-31a51406b836,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b867bc27-eb06-4077-b240-31a51406b836,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-g84s8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b867bc27-eb06-4077-b240-31a51406b836;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b867bc27-eb06-4077-b240-31a51406b836;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55d4863fc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2769 identity=2480 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b867bc27-eb06-4077-b240-31a51406b836,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b867bc27-eb06-4077-b240-31a51406b836,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-g84s8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55d4863fc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2769 identity=2480 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-g84s8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=55d4863fc3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2769 identity=2480 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-g84s8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=55d4863fc3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2769 identity=2480 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-g84s8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=55d4863fc3 endpointID=2769 k8sNamespace=openstack k8sPodName=glance-rabbit-init-g84s8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b867bc27-eb06-4077-b240-31a51406b836 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b867bc27-eb06-4077-b240-31a51406b836 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=55d4863fc3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2769 identity=2480 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/glance-rabbit-init-g84s8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 10c8719e-abda-436a-9581-a651ff58df4a default }" containerID=89a2fd873b1938cd6882c25e44494d5b76357d0867a6391e557c89c4007acf5c datapathConfiguration="&{false false false false false }" interface=lxc8c6210af7702 k8sPodName=openstack/glance-ks-service-4m7qv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89a2fd873b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3622 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-4m7qv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89a2fd873b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3622 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=65889062-22fe-4070-933c-84db007d6864,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=65889062-22fe-4070-933c-84db007d6864,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-4m7qv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=65889062-22fe-4070-933c-84db007d6864;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=65889062-22fe-4070-933c-84db007d6864;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=89a2fd873b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3622 identity=44859 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=65889062-22fe-4070-933c-84db007d6864,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=65889062-22fe-4070-933c-84db007d6864,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-4m7qv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89a2fd873b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3622 identity=44859 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-4m7qv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89a2fd873b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3622 identity=44859 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-4m7qv subsys=endpoint level=info msg="Successful endpoint creation" containerID=89a2fd873b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3622 identity=44859 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-4m7qv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=89a2fd873b endpointID=3622 k8sNamespace=openstack k8sPodName=glance-ks-service-4m7qv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=65889062-22fe-4070-933c-84db007d6864 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=65889062-22fe-4070-933c-84db007d6864 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=89a2fd873b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3622 identity=44859 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-4m7qv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 08f8ed88-9c13-42ac-821c-453d0ad83e01 default }" containerID=0330bcb40b822b10797c755a259be2f270e5eebda291cdaeffc7302341df6506 datapathConfiguration="&{false false false false false }" interface=lxcfc45a827e926 k8sPodName=openstack/glance-ks-endpoints-twq6p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0330bcb40b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-endpoints-twq6p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0330bcb40b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5113e3ed-39f4-4771-ab9c-fc6a43065747,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5113e3ed-39f4-4771-ab9c-fc6a43065747,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-endpoints-twq6p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5113e3ed-39f4-4771-ab9c-fc6a43065747;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=5113e3ed-39f4-4771-ab9c-fc6a43065747;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0330bcb40b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=15547 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5113e3ed-39f4-4771-ab9c-fc6a43065747,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5113e3ed-39f4-4771-ab9c-fc6a43065747,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-endpoints-twq6p oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0330bcb40b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=15547 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-endpoints-twq6p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0330bcb40b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1119 identity=15547 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-endpoints-twq6p subsys=endpoint level=info msg="Successful endpoint creation" containerID=0330bcb40b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1119 identity=15547 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-endpoints-twq6p subsys=daemon level=info msg="Delete endpoint request" containerID=0330bcb40b endpointID=1119 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-twq6p subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5113e3ed-39f4-4771-ab9c-fc6a43065747 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=5113e3ed-39f4-4771-ab9c-fc6a43065747 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0330bcb40b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1119 identity=15547 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-endpoints-twq6p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 bcd77536-f4c3-40ae-ac9e-8984b99408a0 default }" containerID=366f06a03a73c1ca7c0403975e6ccbd910de55fb2a4f7b6d96c2e7099c22f584 datapathConfiguration="&{false false false false false }" interface=lxc081874ca3a9b k8sPodName=openstack/glance-ks-user-948x6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=366f06a03a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-user-948x6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=366f06a03a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e6947838-fe98-4910-9d5b-8fd14bfccdd6,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=e6947838-fe98-4910-9d5b-8fd14bfccdd6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-user-948x6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=366f06a03a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-user-948x6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e6947838-fe98-4910-9d5b-8fd14bfccdd6;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=e6947838-fe98-4910-9d5b-8fd14bfccdd6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=366f06a03a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identity=36389 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e6947838-fe98-4910-9d5b-8fd14bfccdd6,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=e6947838-fe98-4910-9d5b-8fd14bfccdd6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-user-948x6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=366f06a03a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identity=36389 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-user-948x6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=366f06a03a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=167 identity=36389 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-user-948x6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=366f06a03a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=167 identity=36389 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-user-948x6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=366f06a03a endpointID=167 k8sNamespace=openstack k8sPodName=glance-ks-user-948x6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e6947838-fe98-4910-9d5b-8fd14bfccdd6 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=e6947838-fe98-4910-9d5b-8fd14bfccdd6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=366f06a03a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=167 identity=36389 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-user-948x6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 5b08269d-475d-45a0-9a6b-4a4379e03460 default }" containerID=264f9868ea5de6c730781c24a0da552a45b9232406aaf6e68a88569b4d609a72 datapathConfiguration="&{false false false false false }" interface=lxcf969692ab61e k8sPodName=openstack/glance-metadefs-load-zb4cv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=264f9868ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-metadefs-load-zb4cv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=264f9868ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=22ba09e0-c0e8-43db-969f-a687b633267a,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=22ba09e0-c0e8-43db-969f-a687b633267a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-metadefs-load-zb4cv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=264f9868ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-metadefs-load-zb4cv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=22ba09e0-c0e8-43db-969f-a687b633267a;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=22ba09e0-c0e8-43db-969f-a687b633267a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=264f9868ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identity=60949 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=22ba09e0-c0e8-43db-969f-a687b633267a,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=22ba09e0-c0e8-43db-969f-a687b633267a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-metadefs-load-zb4cv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=264f9868ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identity=60949 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-metadefs-load-zb4cv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=264f9868ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=967 identity=60949 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-metadefs-load-zb4cv subsys=endpoint level=info msg="Successful endpoint creation" containerID=264f9868ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=967 identity=60949 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-metadefs-load-zb4cv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=264f9868ea endpointID=967 k8sNamespace=openstack k8sPodName=glance-metadefs-load-zb4cv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=22ba09e0-c0e8-43db-969f-a687b633267a k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=22ba09e0-c0e8-43db-969f-a687b633267a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=264f9868ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=967 identity=60949 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-metadefs-load-zb4cv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 cb23b360-6d04-43ac-90fc-92ef0c8b0edc default }" containerID=a1b382cce0c810a7f112a7d01774f1d4145fedfc02d42dc7bb5c6cf3de401f5e datapathConfiguration="&{false false false false false }" interface=lxc9d2059bc5155 k8sPodName=openstack/glance-storage-init-p82wc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1b382cce0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-storage-init-p82wc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1b382cce0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=32a2380d-bf78-44e0-986f-95470db1990b,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=32a2380d-bf78-44e0-986f-95470db1990b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-storage-init-p82wc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=32a2380d-bf78-44e0-986f-95470db1990b;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=32a2380d-bf78-44e0-986f-95470db1990b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1b382cce0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identity=9187 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=32a2380d-bf78-44e0-986f-95470db1990b,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=32a2380d-bf78-44e0-986f-95470db1990b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-storage-init-p82wc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1b382cce0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identity=9187 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-storage-init-p82wc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a1b382cce0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=85 identity=9187 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-storage-init-p82wc subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1b382cce0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=85 identity=9187 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-storage-init-p82wc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a1b382cce0 endpointID=85 k8sNamespace=openstack k8sPodName=glance-storage-init-p82wc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=32a2380d-bf78-44e0-986f-95470db1990b k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=32a2380d-bf78-44e0-986f-95470db1990b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a1b382cce0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=85 identity=9187 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-storage-init-p82wc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 e57799ec-f4ff-44b0-99bb-53c8ef0178a9 default }" containerID=b454e902373f990d22ff001895d3e52360a421b31dd0999266047144efa89b14 datapathConfiguration="&{false false false false false }" interface=lxc0f5804e7e2eb k8sPodName=openstack/glance-api-7ccb86bf97-dzw2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b454e90237 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-api-7ccb86bf97-dzw2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b454e90237 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-api-7ccb86bf97-dzw2c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b454e90237 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-api-7ccb86bf97-dzw2c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b454e90237 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=29026 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-api-7ccb86bf97-dzw2c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b454e90237 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=29026 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-api-7ccb86bf97-dzw2c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b454e90237 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=665 identity=29026 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-api-7ccb86bf97-dzw2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=b454e90237 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=665 identity=29026 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-api-7ccb86bf97-dzw2c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.200 d66dc593-35af-4cca-994f-2b68f69e6dfb default }" containerID=0c515762f46041a264d74db195ea4d204d1fb12733f229d780b6ab227e3f03bb datapathConfiguration="&{false false false false false }" interface=lxc14167a471591 k8sPodName=openstack/staffeln-conductor-67c6dbf77d-xw7k2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c515762f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-conductor-67c6dbf77d-xw7k2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c515762f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-conductor-67c6dbf77d-xw7k2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0c515762f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-conductor-67c6dbf77d-xw7k2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c515762f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 identity=10236 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-conductor-67c6dbf77d-xw7k2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c515762f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 identity=10236 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-conductor-67c6dbf77d-xw7k2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 de4f33ba-52d5-4eda-b49c-387f2cc005b1 default }" containerID=3e07befaac06d67f411c0c46ac9b100a5268ec7e06e12e7b01b65f53729cad9b datapathConfiguration="&{false false false false false }" interface=lxc4ffdc5f187a9 k8sPodName=openstack/staffeln-api-7bc95d9bc7-x7pgq labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.207 9f9cb05a-d13e-4d92-a18c-2bffc83080e5 default }" containerID=489c2743ac6a80b73b3c3e4eb6de5225abf02faa6c2be3ec98a1d2d5ae99f0a6 datapathConfiguration="&{false false false false false }" interface=lxc1c16af778610 k8sPodName=openstack/staffeln-db-init-hvcm2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e07befaac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=233 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-api-7bc95d9bc7-x7pgq subsys=endpoint level=info msg="New endpoint" containerID=489c2743ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2273 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-db-init-hvcm2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e07befaac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=233 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-api-7bc95d9bc7-x7pgq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=489c2743ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2273 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=701b72e3-71a8-4193-b1b9-4f1e904bfdcb,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=701b72e3-71a8-4193-b1b9-4f1e904bfdcb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-db-init-hvcm2 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e07befaac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=233 identity=36553 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-api-7bc95d9bc7-x7pgq oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=3e07befaac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=233 identity=36553 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-api-7bc95d9bc7-x7pgq subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=701b72e3-71a8-4193-b1b9-4f1e904bfdcb;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=701b72e3-71a8-4193-b1b9-4f1e904bfdcb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=489c2743ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2273 identity=30048 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=701b72e3-71a8-4193-b1b9-4f1e904bfdcb,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=701b72e3-71a8-4193-b1b9-4f1e904bfdcb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-db-init-hvcm2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=489c2743ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2273 identity=30048 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-db-init-hvcm2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c515762f4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=876 identity=10236 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-conductor-67c6dbf77d-xw7k2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c515762f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=876 identity=10236 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-conductor-67c6dbf77d-xw7k2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3e07befaac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=233 identity=36553 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-api-7bc95d9bc7-x7pgq subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e07befaac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=233 identity=36553 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-api-7bc95d9bc7-x7pgq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=489c2743ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2273 identity=30048 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-db-init-hvcm2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=489c2743ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2273 identity=30048 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-db-init-hvcm2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=489c2743ac endpointID=2273 k8sNamespace=openstack k8sPodName=staffeln-db-init-hvcm2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=701b72e3-71a8-4193-b1b9-4f1e904bfdcb k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=701b72e3-71a8-4193-b1b9-4f1e904bfdcb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=489c2743ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2273 identity=30048 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-db-init-hvcm2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 4ab7953e-38da-4af4-8942-d5563429a8fa default }" containerID=2a5524c6df575218065b3f01a4a14ea42de42f5cdad2bfc85ede0f7f16535433 datapathConfiguration="&{false false false false false }" interface=lxcdbe832509393 k8sPodName=openstack/staffeln-db-sync-7hwds labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a5524c6df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-db-sync-7hwds subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a5524c6df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5b6b1434-6dde-46aa-b920-b3924f9117d0,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=5b6b1434-6dde-46aa-b920-b3924f9117d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-db-sync-7hwds subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2a5524c6df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-db-sync-7hwds line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=5b6b1434-6dde-46aa-b920-b3924f9117d0;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=5b6b1434-6dde-46aa-b920-b3924f9117d0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a5524c6df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 identity=18318 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5b6b1434-6dde-46aa-b920-b3924f9117d0,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=5b6b1434-6dde-46aa-b920-b3924f9117d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-db-sync-7hwds oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a5524c6df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 identity=18318 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-db-sync-7hwds subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a5524c6df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1911 identity=18318 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-db-sync-7hwds subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a5524c6df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1911 identity=18318 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-db-sync-7hwds subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager