level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.07681ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="70.403µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.128571ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.86µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=88.142059ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.111µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="58.791µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="118.804µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="68.233µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="78.611µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="454.172µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.37µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.488744ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.56103ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="41.022µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="38.011µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="257.348µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="91.013µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="62.272µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=45.727316ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="133.673µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="16.411µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.19µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.181.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.508041ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="12.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.365705ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="38.231µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.580491ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="6.891µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.51µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.79µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="16.661µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="124.283µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="36.591µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="127.153µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="412.602µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.16µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="8.42µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="397.501µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="752.061µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="894.055µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.36µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="18.62µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.181 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.181 ipAddr.ipv6="" k8sNodeIP=199.19.213.181 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.181" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.183" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.181" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.181} {CiliumInternalIP 10.0.0.183}] 10.0.0.0/24 [] [] 10.0.0.206 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:35857" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.418980561s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="19µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="23.74µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="58.252µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="19.191µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.542309694s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=316.373677ms file-path=/var/run/cilium/state/templates/e5359e908e317c7d7f18b8a66d68f5e1c26f32d22eba69a0afa9a18ea3356c26/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3941 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1415 ipv4=10.0.0.206 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1415 identityLabels="reserved:health" ipv4=10.0.0.206 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1415 identity=4 identityLabels="reserved:health" ipv4=10.0.0.206 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 2d094e60-6071-4fcc-828c-683499096784 default }" containerID=429bbe9d7737893a7dacb238c7a6eff002e5c351c81989fc6862d0c77b56fbb2 datapathConfiguration="&{false false false false false }" interface=lxc27e2a6ac2a12 k8sPodName=kube-system/coredns-7c96b6546b-dgh5j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=429bbe9d77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1296 ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-dgh5j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=429bbe9d77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1296 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-dgh5j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=429bbe9d77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1296 identity=44639 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-dgh5j oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=429bbe9d77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1296 identity=44639 ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-dgh5j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 3e54fef8-e991-48b6-af99-a8b4af149c9a default }" containerID=6b651a660dcec3a748e986d4fd82e628581e9f270b1e5c990e39bc348340ea1b datapathConfiguration="&{false false false false false }" interface=lxc346a6183c0c8 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-l4p9b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b651a660d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 ipv4=10.0.0.190 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-l4p9b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b651a660d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=c73c21e3-c61f-43d9-8fed-5497e9e32662,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=c73c21e3-c61f-43d9-8fed-5497e9e32662,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.190 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-l4p9b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=c73c21e3-c61f-43d9-8fed-5497e9e32662;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=c73c21e3-c61f-43d9-8fed-5497e9e32662;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b651a660d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 identity=19892 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=c73c21e3-c61f-43d9-8fed-5497e9e32662,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=c73c21e3-c61f-43d9-8fed-5497e9e32662,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.190 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-l4p9b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b651a660d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 identity=19892 ipv4=10.0.0.190 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-l4p9b subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.120213335s file-path=/var/run/cilium/state/templates/44bdfc1f83f656a5e145677a9a169672cfc9eef793987ebb48fedf8098817381/bpf_lxc.o subsys=datapath-loader level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=429bbe9d77 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1296 identity=44639 ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-dgh5j subsys=endpoint level=info msg="Successful endpoint creation" containerID=429bbe9d77 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1296 identity=44639 ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-dgh5j subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6b651a660d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=177 identity=19892 ipv4=10.0.0.190 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-l4p9b subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b651a660d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=177 identity=19892 ipv4=10.0.0.190 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-l4p9b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1415 identity=4 ipv4=10.0.0.206 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6b651a660d endpointID=177 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-l4p9b subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=c73c21e3-c61f-43d9-8fed-5497e9e32662 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=c73c21e3-c61f-43d9-8fed-5497e9e32662 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=6b651a660d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=177 identity=19892 ipv4=10.0.0.190 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-l4p9b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 53722cd3-87b6-4df2-88f7-8fba5d8ce4e2 default }" containerID=5550e73910cedbcee87e9c57cd6d9a4bc4570a208aad80428fa77642d173493c datapathConfiguration="&{false false false false false }" interface=lxcf48f6363bae7 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mfrv4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5550e73910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3246 ipv4=10.0.0.212 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mfrv4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5550e73910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3246 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.212 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mfrv4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5550e73910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3246 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.212 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mfrv4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5550e73910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3246 identity=19479 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.212 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mfrv4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5550e73910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3246 identity=19479 ipv4=10.0.0.212 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mfrv4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5550e73910 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3246 identity=19479 ipv4=10.0.0.212 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mfrv4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5550e73910 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3246 identity=19479 ipv4=10.0.0.212 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mfrv4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3941 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03941 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03941 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03941 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03941:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3941 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 3cdc80c4-f8b3-411c-9489-b3f044cc9eb4 default }" containerID=11015c8e496dcb5fff8cdb152f11f8726266a9948b4916e947980dec9d40e464 datapathConfiguration="&{false false false false false }" interface=lxc07c86a184b65 k8sPodName=kube-system/coredns-67659f764b-nscpf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11015c8e49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 ipv4=10.0.0.213 ipv6= k8sPodName=kube-system/coredns-67659f764b-nscpf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11015c8e49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.213 ipv6= k8sPodName=kube-system/coredns-67659f764b-nscpf subsys=endpoint level=info msg="Identity of endpoint changed" containerID=11015c8e49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 identity=44639 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.213 ipv6= k8sPodName=kube-system/coredns-67659f764b-nscpf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11015c8e49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 identity=44639 ipv4=10.0.0.213 ipv6= k8sPodName=kube-system/coredns-67659f764b-nscpf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=11015c8e49 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3253 identity=44639 ipv4=10.0.0.213 ipv6= k8sPodName=kube-system/coredns-67659f764b-nscpf subsys=endpoint level=info msg="Successful endpoint creation" containerID=11015c8e49 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3253 identity=44639 ipv4=10.0.0.213 ipv6= k8sPodName=kube-system/coredns-67659f764b-nscpf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.180 42a6eed1-6284-4508-9283-e9f23f645bc4 default }" containerID=625acef807f017bf5448aea654e8e38bfcb2a80a1b0869ac1c123a0992d597f8 datapathConfiguration="&{false false false false false }" interface=lxc4ce36b055401 k8sPodName=kube-system/coredns-67659f764b-kzshv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=625acef807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3564 ipv4=10.0.0.180 ipv6= k8sPodName=kube-system/coredns-67659f764b-kzshv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=625acef807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3564 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.180 ipv6= k8sPodName=kube-system/coredns-67659f764b-kzshv subsys=endpoint level=info msg="Identity of endpoint changed" containerID=625acef807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3564 identity=44639 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.180 ipv6= k8sPodName=kube-system/coredns-67659f764b-kzshv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=625acef807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3564 identity=44639 ipv4=10.0.0.180 ipv6= k8sPodName=kube-system/coredns-67659f764b-kzshv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=625acef807 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3564 identity=44639 ipv4=10.0.0.180 ipv6= k8sPodName=kube-system/coredns-67659f764b-kzshv subsys=endpoint level=info msg="Successful endpoint creation" containerID=625acef807 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3564 identity=44639 ipv4=10.0.0.180 ipv6= k8sPodName=kube-system/coredns-67659f764b-kzshv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.136 507e0fab-4345-4a20-b591-0d4161275f69 default }" containerID=4f951c38015f45e8866df4bb99ade21ac57d0251a1001969a996529ca665e761 datapathConfiguration="&{false false false false false }" interface=lxc57a77ec4f719 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qxff9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f951c3801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2082 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qxff9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f951c3801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2082 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qxff9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4f951c3801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2082 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qxff9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f951c3801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2082 identity=14745 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qxff9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f951c3801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2082 identity=14745 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qxff9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f951c3801 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2082 identity=14745 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qxff9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f951c3801 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2082 identity=14745 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qxff9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=429bbe9d77 endpointID=1296 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-dgh5j subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=429bbe9d77 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1296 identity=44639 ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-dgh5j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 ff341896-3097-48eb-acc4-405f14b2b8e7 default }" containerID=adc549114263cef9617f59673444738b9061c5299274acc1bde33924885ba090 datapathConfiguration="&{false false false false false }" interface=lxcbd5bc17e9320 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2q477 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=adc5491142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 ipv4=10.0.0.99 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2q477 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 3b75461a-5061-487d-9479-9b325211be12 default }" containerID=af7eebf05e2ae357f8c861c56de5cd56322c98390de39b6985691bc3b481a64b datapathConfiguration="&{false false false false false }" interface=lxcd1e3f68b49bc k8sPodName=cert-manager/cert-manager-75c4c745bc-7ts6h labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=adc5491142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.99 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2q477 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=af7eebf05e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7ts6h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af7eebf05e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7ts6h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 410e8a96-3c91-4f34-871e-7dcb4d886735 default }" containerID=6af180ac435f8e89bab622f990ca33290195d42fd169ade47f4eb95e642005f5 datapathConfiguration="&{false false false false false }" interface=lxc34ab71b4d260 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g2dpg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6af180ac43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g2dpg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6af180ac43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g2dpg subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=adc5491142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identity=29895 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.99 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2q477 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=adc5491142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identity=29895 ipv4=10.0.0.99 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2q477 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=af7eebf05e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7ts6h line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=6af180ac43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g2dpg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af7eebf05e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identity=26649 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7ts6h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af7eebf05e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identity=26649 ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7ts6h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6af180ac43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 identity=13224 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g2dpg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6af180ac43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 identity=13224 ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g2dpg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af7eebf05e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=234 identity=26649 ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7ts6h subsys=endpoint level=info msg="Successful endpoint creation" containerID=af7eebf05e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=234 identity=26649 ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7ts6h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=adc5491142 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=651 identity=29895 ipv4=10.0.0.99 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2q477 subsys=endpoint level=info msg="Successful endpoint creation" containerID=adc5491142 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=651 identity=29895 ipv4=10.0.0.99 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2q477 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6af180ac43 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1059 identity=13224 ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g2dpg subsys=endpoint level=info msg="Successful endpoint creation" containerID=6af180ac43 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1059 identity=13224 ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g2dpg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.200 cb428039-2dc2-4b8e-8b27-d372f86a9c24 default }" containerID=f546bb5836bc7e2ff6f44b08b36938e176604cf0a412f6934c6bd404a59b958c datapathConfiguration="&{false false false false false }" interface=lxc41848558e3e4 k8sPodName=cert-manager/cert-manager-startupapicheck-ph5gl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f546bb5836 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2314 ipv4=10.0.0.200 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ph5gl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f546bb5836 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2314 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=15931a35-21f7-4cef-b937-3ee0f6ce375e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=15931a35-21f7-4cef-b937-3ee0f6ce375e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.200 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ph5gl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=15931a35-21f7-4cef-b937-3ee0f6ce375e;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=15931a35-21f7-4cef-b937-3ee0f6ce375e;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f546bb5836 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2314 identity=4835 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=15931a35-21f7-4cef-b937-3ee0f6ce375e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=15931a35-21f7-4cef-b937-3ee0f6ce375e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.200 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ph5gl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f546bb5836 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2314 identity=4835 ipv4=10.0.0.200 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ph5gl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f546bb5836 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2314 identity=4835 ipv4=10.0.0.200 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ph5gl subsys=endpoint level=info msg="Successful endpoint creation" containerID=f546bb5836 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2314 identity=4835 ipv4=10.0.0.200 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ph5gl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f546bb5836 endpointID=2314 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-ph5gl subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=15931a35-21f7-4cef-b937-3ee0f6ce375e k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=15931a35-21f7-4cef-b937-3ee0f6ce375e k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=f546bb5836 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2314 identity=4835 ipv4=10.0.0.200 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ph5gl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 ae549dab-6f76-4369-ad03-620a8818f60c default }" containerID=813e3d7666ab25da13e7329c83d73f35f8d5474b676eaf0ca5bd81df10e7e328 datapathConfiguration="&{false false false false false }" interface=lxc78e9c4884fa5 k8sPodName=ingress-nginx/ingress-nginx-admission-create-8c879 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=813e3d7666 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8c879 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=813e3d7666 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=59e15945-b69a-4600-8e04-7ca5273ac430,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=59e15945-b69a-4600-8e04-7ca5273ac430,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8c879 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=813e3d7666 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8c879 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=59e15945-b69a-4600-8e04-7ca5273ac430;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=59e15945-b69a-4600-8e04-7ca5273ac430;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=813e3d7666 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identity=47889 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=59e15945-b69a-4600-8e04-7ca5273ac430,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=59e15945-b69a-4600-8e04-7ca5273ac430,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8c879 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=813e3d7666 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identity=47889 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8c879 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=813e3d7666 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=156 identity=47889 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8c879 subsys=endpoint level=info msg="Successful endpoint creation" containerID=813e3d7666 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=156 identity=47889 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8c879 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=813e3d7666 endpointID=156 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-8c879 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=59e15945-b69a-4600-8e04-7ca5273ac430 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=59e15945-b69a-4600-8e04-7ca5273ac430 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=813e3d7666 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=156 identity=47889 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8c879 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 d50dd2a3-1df8-4eec-8975-f6e4603ace0d default }" containerID=4c871c9eaaaaa4605e8fa6595a09cbcdaca56c1e9fc9a1093f0175e0269415cb datapathConfiguration="&{false false false false false }" interface=lxc37489ae75c1c k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-z95fq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c871c9eaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 ipv4=10.0.0.49 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-z95fq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c871c9eaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.49 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-z95fq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c871c9eaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 identity=2103 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.49 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-z95fq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4c871c9eaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=668 identity=2103 ipv4=10.0.0.49 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-z95fq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c871c9eaa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=668 identity=2103 ipv4=10.0.0.49 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-z95fq subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c871c9eaa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=668 identity=2103 ipv4=10.0.0.49 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-z95fq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.225 bdbc8bf4-667d-49d3-b4e7-284dff16639c default }" containerID=4c0eb9be70c9dc9adf905c7459b3df71bdb721b1460a28b0d4102ad0c5352e07 datapathConfiguration="&{false false false false false }" interface=lxc075e79b981ce k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dgdrh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c0eb9be70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=408 ipv4=10.0.0.225 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dgdrh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c0eb9be70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=408 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=390d0e77-f118-40bf-b09f-b75c8a6ef57d,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=390d0e77-f118-40bf-b09f-b75c8a6ef57d,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.225 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dgdrh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=390d0e77-f118-40bf-b09f-b75c8a6ef57d;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=390d0e77-f118-40bf-b09f-b75c8a6ef57d;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c0eb9be70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=408 identity=25579 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=390d0e77-f118-40bf-b09f-b75c8a6ef57d,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=390d0e77-f118-40bf-b09f-b75c8a6ef57d,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.225 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dgdrh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c0eb9be70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=408 identity=25579 ipv4=10.0.0.225 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dgdrh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c0eb9be70 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=408 identity=25579 ipv4=10.0.0.225 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dgdrh subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c0eb9be70 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=408 identity=25579 ipv4=10.0.0.225 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dgdrh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4c0eb9be70 endpointID=408 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-dgdrh subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=390d0e77-f118-40bf-b09f-b75c8a6ef57d k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=390d0e77-f118-40bf-b09f-b75c8a6ef57d k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=4c0eb9be70 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=408 identity=25579 ipv4=10.0.0.225 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dgdrh subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=bcfe9f26-acc4-44ae-b666-d972a9850c54] Description:}]" policyAddRequest=725c8979-0672-4323-86d0-c9491b9d01c9 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=725c8979-0672-4323-86d0-c9491b9d01c9 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=0e77fd08-ba38-4ec8-8ace-4bedc985ddea] Description:}]" policyAddRequest=cee33eb0-657e-4b7e-8c08-45a66dcefbdc subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=cee33eb0-657e-4b7e-8c08-45a66dcefbdc policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.181 4ecfa5e8-6927-4a79-acf9-fa2470ef9c43 default }" containerID=65afa06c2c6a9dfd2c9ec8b9b3af58fa4e41b3c62e5e55d7f9b76f4e026b7bc0 datapathConfiguration="&{false false false false false }" interface=lxcc0a07a6f6bcf k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cg9xs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65afa06c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cg9xs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65afa06c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cg9xs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=65afa06c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cg9xs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65afa06c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identity=1470 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cg9xs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65afa06c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identity=1470 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cg9xs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=65afa06c2c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=289 identity=1470 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cg9xs subsys=endpoint level=info msg="Successful endpoint creation" containerID=65afa06c2c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=289 identity=1470 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-cg9xs subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.62 3b3cd21b-5c7a-4559-bc83-4aa830cd5d41 default }" containerID=ad5bac748c2d35a3c2702dfcd2c0e0c97e9e6c47d2bff2afa73b4de93aa66db2 datapathConfiguration="&{false false false false false }" interface=lxcbb4ca3dbfcca k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2lgq2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad5bac748c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2lgq2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad5bac748c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2lgq2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad5bac748c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 identity=24363 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2lgq2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad5bac748c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 identity=24363 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2lgq2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad5bac748c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1484 identity=24363 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2lgq2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad5bac748c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1484 identity=24363 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2lgq2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.88 2c0676ff-7833-4034-995a-898a451afe7e default }" containerID=03bccedd7051e4a8d2144ed76e8993db7ab059df865bd7246de866ee6afb8c0a datapathConfiguration="&{false false false false false }" interface=lxc0bf325b9b318 k8sPodName=openstack/pxc-operator-69cb5bbdb9-pnv2t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03bccedd70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pnv2t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03bccedd70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pnv2t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03bccedd70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identity=32762 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pnv2t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03bccedd70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identity=32762 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pnv2t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=03bccedd70 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=741 identity=32762 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pnv2t subsys=endpoint level=info msg="Successful endpoint creation" containerID=03bccedd70 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=741 identity=32762 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-pnv2t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.185 8f4ab437-5a7a-4ada-8a7c-2502411c89fc default }" containerID=125a5fec27b23afa69d86974edb56cb34a927a16ab7979ba25b61c0496de4901 datapathConfiguration="&{false false false false false }" interface=lxc054172dfee69 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=125a5fec27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=125a5fec27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=125a5fec27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=125a5fec27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identity=9330 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=125a5fec27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identity=9330 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=125a5fec27 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1075 identity=9330 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=125a5fec27 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1075 identity=9330 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.253 ff8e49d5-e9a1-46e8-b4dd-b5af062330d6 default }" containerID=1919da644afb3ee3bc119c1046ad985f9be4368bfa66be4f2055778a1f9d62a7 datapathConfiguration="&{false false false false false }" interface=lxc5326465dcfe8 k8sPodName=local-path-storage/helper-pod-create-pvc-266c793c-13de-4dc1-9958-acfcfb2e1e06 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1919da644a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2028 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-266c793c-13de-4dc1-9958-acfcfb2e1e06 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1919da644a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2028 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-266c793c-13de-4dc1-9958-acfcfb2e1e06 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1919da644a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2028 identity=1011 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-266c793c-13de-4dc1-9958-acfcfb2e1e06 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1919da644a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2028 identity=1011 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-266c793c-13de-4dc1-9958-acfcfb2e1e06 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1919da644a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2028 identity=1011 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-266c793c-13de-4dc1-9958-acfcfb2e1e06 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1919da644a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2028 identity=1011 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-266c793c-13de-4dc1-9958-acfcfb2e1e06 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1919da644a endpointID=2028 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-266c793c-13de-4dc1-9958-acfcfb2e1e06 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1919da644a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2028 identity=1011 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-266c793c-13de-4dc1-9958-acfcfb2e1e06 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 a6d28b13-1171-4942-abe8-b022437e76be default }" containerID=d988df2974856f4a884211c7f1dbc56800f7fd93412f26124630e6faf72b9cf5 datapathConfiguration="&{false false false false false }" interface=lxcdeb492f5496c k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d988df2974 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2719 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d988df2974 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2719 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d988df2974 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2719 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.182 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d988df2974 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2719 identity=23989 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d988df2974 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2719 identity=23989 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d988df2974 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2719 identity=23989 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d988df2974 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2719 identity=23989 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=3ce953d8-8346-43eb-b596-f7e82aa5322d] Description:}]" policyAddRequest=aa5f2a36-72e6-4a25-a796-102ec70024a2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=aa5f2a36-72e6-4a25-a796-102ec70024a2 policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.129 1c62515b-3d0a-4c3b-bfb3-f400eae54464 default }" containerID=a6b60c0801979ce5d8da67a6564d015fd2419ae261cb60dae90b8cc8b2f7b95d datapathConfiguration="&{false false false false false }" interface=lxce8b965913974 k8sPodName=local-path-storage/helper-pod-create-pvc-28f0ebbf-0e6a-4603-9999-a9850059692f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6b60c0801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=928 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28f0ebbf-0e6a-4603-9999-a9850059692f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6b60c0801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=928 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28f0ebbf-0e6a-4603-9999-a9850059692f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6b60c0801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=928 identity=1011 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28f0ebbf-0e6a-4603-9999-a9850059692f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6b60c0801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=928 identity=1011 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28f0ebbf-0e6a-4603-9999-a9850059692f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6b60c0801 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=928 identity=1011 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28f0ebbf-0e6a-4603-9999-a9850059692f subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6b60c0801 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=928 identity=1011 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28f0ebbf-0e6a-4603-9999-a9850059692f subsys=daemon level=info msg="Delete endpoint request" containerID=a6b60c0801 endpointID=928 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-28f0ebbf-0e6a-4603-9999-a9850059692f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a6b60c0801 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=928 identity=1011 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28f0ebbf-0e6a-4603-9999-a9850059692f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 ea22d787-4816-4c70-9b09-70d996019ba6 default }" containerID=c9edb3db91288d92131bb0fd32ba27b7eb03f63cf568596bb63791d2665a4994 datapathConfiguration="&{false false false false false }" interface=lxcb304347ad69f k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9edb3db91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9edb3db91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9edb3db91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identity=42549 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9edb3db91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identity=42549 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c9edb3db91 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=818 identity=42549 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9edb3db91 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=818 identity=42549 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=a5bd4a2a-f762-4ca6-b941-030f3d65aa6b] Description:}]" policyAddRequest=89468a02-7913-467e-8247-97a8a4751544 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=89468a02-7913-467e-8247-97a8a4751544 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.207 70d310f4-d0ee-4ede-a5f8-22d2ff324761 default }" containerID=a807f6407f0c1ec9dce5c0d43e6658f7cd026619ec3281882f073db65a66e5ec datapathConfiguration="&{false false false false false }" interface=lxc04f3c97004fa k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a807f6407f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2712 ipv4=10.0.0.207 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a807f6407f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2712 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.207 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a807f6407f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2712 identity=44213 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.207 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a807f6407f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2712 identity=44213 ipv4=10.0.0.207 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a807f6407f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2712 identity=44213 ipv4=10.0.0.207 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a807f6407f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2712 identity=44213 ipv4=10.0.0.207 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.007520932812098422 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.184 547d6002-79be-4e55-aa1d-d08dbcbc13d9 default }" containerID=de68a48ef19959d69430c25ca67be0b2d4eb21a0884e582a339d96618d70c717 datapathConfiguration="&{false false false false false }" interface=lxc72ee3fca2f40 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pq542 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de68a48ef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pq542 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de68a48ef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pq542 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de68a48ef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identity=8833 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pq542 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=de68a48ef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identity=8833 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pq542 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 371d17e4-da66-42ef-9698-87a37a0d2672 default }" containerID=19041e5d3b9c3dce429c2951d186b4087679ea5674e05092305fdc5327214ad1 datapathConfiguration="&{false false false false false }" interface=lxc0d9381e26af0 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-r26ss labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19041e5d3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-r26ss subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19041e5d3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-r26ss subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19041e5d3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identity=12564 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-r26ss oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19041e5d3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identity=12564 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-r26ss subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19041e5d3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=107 identity=12564 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-r26ss subsys=endpoint level=info msg="Successful endpoint creation" containerID=19041e5d3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=107 identity=12564 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-r26ss subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=de68a48ef1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2 identity=8833 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pq542 subsys=endpoint level=info msg="Successful endpoint creation" containerID=de68a48ef1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2 identity=8833 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pq542 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.245 5b790e37-24e9-43b0-8bc9-1bb922703474 default }" containerID=c60fe26e98fff9036a2ed02eaa3545622a302c1fcb9160524a47d4d366ffeb48 datapathConfiguration="&{false false false false false }" interface=lxc85d6f2167a34 k8sPodName=monitoring/node-feature-discovery-worker-k24kj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c60fe26e98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-k24kj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c60fe26e98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-k24kj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c60fe26e98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identity=15416 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-k24kj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c60fe26e98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identity=15416 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-k24kj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c60fe26e98 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=207 identity=15416 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-k24kj subsys=endpoint level=info msg="Successful endpoint creation" containerID=c60fe26e98 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=207 identity=15416 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-k24kj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.76 794f0098-df38-4f8d-9863-aecdf6e249cf default }" containerID=67f1b6ce6d1dd6908965a47341342f4431996de3b56daea17c084e062da59fbc datapathConfiguration="&{false false false false false }" interface=lxcb13a7f848b89 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gtbmz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67f1b6ce6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2907 ipv4=10.0.0.76 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gtbmz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67f1b6ce6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2907 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.76 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gtbmz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67f1b6ce6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2907 identity=20930 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.76 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gtbmz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67f1b6ce6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2907 identity=20930 ipv4=10.0.0.76 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gtbmz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=67f1b6ce6d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2907 identity=20930 ipv4=10.0.0.76 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gtbmz subsys=endpoint level=info msg="Successful endpoint creation" containerID=67f1b6ce6d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2907 identity=20930 ipv4=10.0.0.76 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gtbmz subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3941 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03941 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03941 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03941 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03941:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3941 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 d65bdb8d-f97f-4c13-9b07-ebb331e420be default }" containerID=0aad6f6030ed8aa6cc6952297ba8534c32012d90aca53af2066855a9acb64a2d datapathConfiguration="&{false false false false false }" interface=lxcc58c2546accb k8sPodName=monitoring/kube-prometheus-stack-admission-create-5mm89 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0aad6f6030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5mm89 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0aad6f6030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d96faccd-751b-4e75-a6a6-47cce7adc4ea,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d96faccd-751b-4e75-a6a6-47cce7adc4ea,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5mm89 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=d96faccd-751b-4e75-a6a6-47cce7adc4ea;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=d96faccd-751b-4e75-a6a6-47cce7adc4ea;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0aad6f6030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5mm89 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0aad6f6030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identity=59982 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d96faccd-751b-4e75-a6a6-47cce7adc4ea,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d96faccd-751b-4e75-a6a6-47cce7adc4ea,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5mm89 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0aad6f6030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identity=59982 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5mm89 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0aad6f6030 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1623 identity=59982 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5mm89 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0aad6f6030 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1623 identity=59982 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5mm89 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0aad6f6030 endpointID=1623 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-5mm89 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=d96faccd-751b-4e75-a6a6-47cce7adc4ea k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=d96faccd-751b-4e75-a6a6-47cce7adc4ea k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=0aad6f6030 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1623 identity=59982 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5mm89 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 d2cdf3cd-56d8-49df-97ff-b278592ed382 default }" containerID=8c85a419ab04d7b4ac42f06aec9236e47604ffbce648fa782f50e2afd60f9dc3 datapathConfiguration="&{false false false false false }" interface=lxc1a39f1981ea2 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rcc4l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c85a419ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=276 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rcc4l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c85a419ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=276 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rcc4l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c85a419ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=276 identity=4475 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rcc4l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c85a419ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=276 identity=4475 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rcc4l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.112 7e2faf2e-6ca1-44f3-a014-884f1be5e34a default }" containerID=a2aea5b75cd547583dbc8bfbfb3c92f4acfc13a2133fb0a6127a3cd5778f97a5 datapathConfiguration="&{false false false false false }" interface=lxc7ff00e6efd23 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lwlrs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2aea5b75c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lwlrs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2aea5b75c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lwlrs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2aea5b75c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identity=6225 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lwlrs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2aea5b75c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identity=6225 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lwlrs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 f53becc6-b4bc-44e5-ad5c-9ae7b185e5b8 default }" containerID=fba9043b5f42196a59a80530abfbfdc11a137287a60deca11e6c364c7802b9e7 datapathConfiguration="&{false false false false false }" interface=lxc249314713b3c k8sPodName=monitoring/kube-prometheus-stack-grafana-7f9b68945b-g2zbt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fba9043b5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=72 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7f9b68945b-g2zbt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fba9043b5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=72 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7f9b68945b-g2zbt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fba9043b5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=72 identity=930 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7f9b68945b-g2zbt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fba9043b5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=72 identity=930 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7f9b68945b-g2zbt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2aea5b75c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1380 identity=6225 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lwlrs subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2aea5b75c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1380 identity=6225 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lwlrs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8c85a419ab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=276 identity=4475 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rcc4l subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c85a419ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=276 identity=4475 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rcc4l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fba9043b5f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=72 identity=930 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7f9b68945b-g2zbt subsys=endpoint level=info msg="Successful endpoint creation" containerID=fba9043b5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=72 identity=930 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7f9b68945b-g2zbt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.166 70dfd8e0-d762-483d-a708-7842e78a0fe1 default }" containerID=7a69f690ccccd89a675db246a2fd84fa255c94529c57f7ec85b7fca64a56df94 datapathConfiguration="&{false false false false false }" interface=lxc92f27202f97d k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hvt8l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a69f690cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3642 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hvt8l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a69f690cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3642 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=74a1eef4-7799-4862-9ac6-50e4a5fdbbf4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=74a1eef4-7799-4862-9ac6-50e4a5fdbbf4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hvt8l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7a69f690cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3642 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hvt8l line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=74a1eef4-7799-4862-9ac6-50e4a5fdbbf4;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=74a1eef4-7799-4862-9ac6-50e4a5fdbbf4;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a69f690cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3642 identity=14242 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=74a1eef4-7799-4862-9ac6-50e4a5fdbbf4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=74a1eef4-7799-4862-9ac6-50e4a5fdbbf4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hvt8l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a69f690cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3642 identity=14242 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hvt8l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a69f690cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3642 identity=14242 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hvt8l subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a69f690cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3642 identity=14242 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hvt8l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7a69f690cc endpointID=3642 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-hvt8l subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=74a1eef4-7799-4862-9ac6-50e4a5fdbbf4 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=74a1eef4-7799-4862-9ac6-50e4a5fdbbf4 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=7a69f690cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3642 identity=14242 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hvt8l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 b4649139-b922-4f70-9d30-f96858431b5b default }" containerID=40b02b67fb813b925aec09ea699cbe6159332be3a5633bff1e537dd35fa378f8 datapathConfiguration="&{false false false false false }" interface=lxcac6e09b40f04 k8sPodName=local-path-storage/helper-pod-create-pvc-13ea00a7-0652-49e3-b2d7-492df3976b09 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40b02b67fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 ipv4=10.0.0.96 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13ea00a7-0652-49e3-b2d7-492df3976b09 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40b02b67fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.96 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13ea00a7-0652-49e3-b2d7-492df3976b09 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40b02b67fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 identity=1011 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.96 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13ea00a7-0652-49e3-b2d7-492df3976b09 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40b02b67fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 identity=1011 ipv4=10.0.0.96 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13ea00a7-0652-49e3-b2d7-492df3976b09 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 fca8fef4-59b3-4e6b-9f8a-55a500a0e9a7 default }" containerID=15ddc1cc2e990b5a87deca75ffd71cc96c96b79012a2af8965a166a461a3c7b0 datapathConfiguration="&{false false false false false }" interface=lxc27d740933f84 k8sPodName=local-path-storage/helper-pod-create-pvc-e4c1787a-a487-4a8b-acbf-246b9d935a6b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15ddc1cc2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3356 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4c1787a-a487-4a8b-acbf-246b9d935a6b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15ddc1cc2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3356 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4c1787a-a487-4a8b-acbf-246b9d935a6b subsys=endpoint level=info msg="Identity of endpoint changed" containerID=15ddc1cc2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3356 identity=1011 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4c1787a-a487-4a8b-acbf-246b9d935a6b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15ddc1cc2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3356 identity=1011 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4c1787a-a487-4a8b-acbf-246b9d935a6b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40b02b67fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=779 identity=1011 ipv4=10.0.0.96 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13ea00a7-0652-49e3-b2d7-492df3976b09 subsys=endpoint level=info msg="Successful endpoint creation" containerID=40b02b67fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=779 identity=1011 ipv4=10.0.0.96 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13ea00a7-0652-49e3-b2d7-492df3976b09 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=15ddc1cc2e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3356 identity=1011 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4c1787a-a487-4a8b-acbf-246b9d935a6b subsys=endpoint level=info msg="Successful endpoint creation" containerID=15ddc1cc2e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3356 identity=1011 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4c1787a-a487-4a8b-acbf-246b9d935a6b subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.19 9ad42619-7cf8-4f82-a202-041cd125224e default }" containerID=e697e102d6f9e2a9ed75dbe2042061c2583c362709b4a4fc973a8de1b781167e datapathConfiguration="&{false false false false false }" interface=lxc066365d05d5f k8sPodName=monitoring/loki-gateway-cf54cb88c-s5rjq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e697e102d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1842 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-s5rjq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e697e102d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1842 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-s5rjq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e697e102d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1842 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-s5rjq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e697e102d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1842 identity=15988 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-s5rjq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e697e102d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1842 identity=15988 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-s5rjq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 39b98f82-5fce-4a34-ac04-e558fd8494d6 default }" containerID=a1457e8f26e661cdcdfade01fcd0b4405e49f6b9154e9d8781347160b62c384f datapathConfiguration="&{false false false false false }" interface=lxc422c613d3587 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1457e8f26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1457e8f26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1457e8f26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=11277 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1457e8f26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=11277 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e697e102d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1842 identity=15988 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-s5rjq subsys=endpoint level=info msg="Successful endpoint creation" containerID=e697e102d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1842 identity=15988 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-s5rjq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.219 bccabab9-c6e8-4abe-a145-f6938e9d86ca default }" containerID=834ca7d4590b61f778f9c0e304fa966f6b64956170f81ef6e55e980eea2f4ebf datapathConfiguration="&{false false false false false }" interface=lxc4abf01df6fb1 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=834ca7d459 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 1e8fe5a9-17cd-458c-aacd-02dc14a332f3 default }" containerID=e9fcbf421788622c43de355075593e1fa377d272cd8064493a1c5e685e5b8654 datapathConfiguration="&{false false false false false }" interface=lxc120ebb180c57 k8sPodName=local-path-storage/helper-pod-create-pvc-4917bfb3-0046-4525-9b59-a80388aa43f3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9fcbf4217 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4917bfb3-0046-4525-9b59-a80388aa43f3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=834ca7d459 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9fcbf4217 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4917bfb3-0046-4525-9b59-a80388aa43f3 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e9fcbf4217 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 identity=1011 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4917bfb3-0046-4525-9b59-a80388aa43f3 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=e9fcbf4217 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 identity=1011 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4917bfb3-0046-4525-9b59-a80388aa43f3 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=834ca7d459 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 identity=54321 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=834ca7d459 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 identity=54321 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1457e8f26 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=560 identity=11277 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1457e8f26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=560 identity=11277 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e9fcbf4217 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2030 identity=1011 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4917bfb3-0046-4525-9b59-a80388aa43f3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9fcbf4217 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2030 identity=1011 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4917bfb3-0046-4525-9b59-a80388aa43f3 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=834ca7d459 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3934 identity=54321 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=834ca7d459 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3934 identity=54321 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Delete endpoint request" containerID=15ddc1cc2e endpointID=3356 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e4c1787a-a487-4a8b-acbf-246b9d935a6b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=40b02b67fb endpointID=779 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-13ea00a7-0652-49e3-b2d7-492df3976b09 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Removed endpoint" containerID=15ddc1cc2e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3356 identity=1011 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4c1787a-a487-4a8b-acbf-246b9d935a6b subsys=endpoint level=info msg="Removed endpoint" containerID=40b02b67fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=779 identity=1011 ipv4=10.0.0.96 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13ea00a7-0652-49e3-b2d7-492df3976b09 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.240 14c881f2-1c2b-4c6a-9234-fdefea9e6e29 default }" containerID=64b113ee15710cdb07a2ebb9fd9169a4d8308006f8d79dca3d4971c3c7816155 datapathConfiguration="&{false false false false false }" interface=lxc76aca4173cb6 k8sPodName=monitoring/vector-kx42n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64b113ee15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/vector-kx42n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64b113ee15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/vector-kx42n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64b113ee15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identity=48733 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/vector-kx42n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64b113ee15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identity=48733 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/vector-kx42n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64b113ee15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=677 identity=48733 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/vector-kx42n subsys=endpoint level=info msg="Successful endpoint creation" containerID=64b113ee15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=677 identity=48733 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/vector-kx42n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e9fcbf4217 endpointID=2030 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4917bfb3-0046-4525-9b59-a80388aa43f3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e9fcbf4217 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2030 identity=1011 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4917bfb3-0046-4525-9b59-a80388aa43f3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 1962a02a-3c1a-4a62-8eff-7a368a71d54d default }" containerID=8be8a41c98566ea4221acd30bf782eff276b25612b07fd92f3c49ae5242a7890 datapathConfiguration="&{false false false false false }" interface=lxcab0ebcf56329 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8be8a41c98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3470 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8be8a41c98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3470 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8be8a41c98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3470 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8be8a41c98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3470 identity=4614 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8be8a41c98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3470 identity=4614 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 04d3233b-13fc-434b-b3d3-8a9805f7a12c default }" containerID=a3faba8c7070658d40d61231ba554fdf7d7e68a2df1d1727a05cf80f0cbccbed datapathConfiguration="&{false false false false false }" interface=lxce711175e6437 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3faba8c70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4058 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3faba8c70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4058 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a3faba8c70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4058 identity=3564 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3faba8c70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4058 identity=3564 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8be8a41c98 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3470 identity=4614 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8be8a41c98 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3470 identity=4614 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a3faba8c70 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4058 identity=3564 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3faba8c70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4058 identity=3564 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.187 85b9f344-c96e-4f9b-8e99-b98de0d5c789 default }" containerID=d07b085929b9735249de1819e73ec8d6d98bb7915b8c524e6c0aa3ddc8529937 datapathConfiguration="&{false false false false false }" interface=lxca9166fa29670 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d07b085929 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d07b085929 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d07b085929 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identity=27512 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d07b085929 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identity=27512 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 2839b6fd-852c-4405-b01e-bededa0e91e9 default }" containerID=caae8576f33f8be328632758acdf52e7caee3c20f90be0e59fe0b008b429df15 datapathConfiguration="&{false false false false false }" interface=lxc2012e1518c3b k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-zsx5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=caae8576f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-zsx5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=caae8576f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-zsx5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=caae8576f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=17352 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-zsx5t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=caae8576f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=17352 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-zsx5t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d07b085929 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=868 identity=27512 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d07b085929 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=868 identity=27512 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=caae8576f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1433 identity=17352 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-zsx5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=caae8576f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1433 identity=17352 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-zsx5t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.20 c31c4b4f-905d-4237-9517-41f91066e26c default }" containerID=44c44b50da49d40b1e6420b2fbb8d6a2b17753f4bae7ecea8b28989736fd9a99 datapathConfiguration="&{false false false false false }" interface=lxcc334a3caa7d8 k8sPodName=openstack/memcached-memcached-6479589586-br8hl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44c44b50da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=49 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-br8hl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44c44b50da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=49 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-br8hl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44c44b50da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=49 identity=1196 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-br8hl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44c44b50da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=49 identity=1196 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-br8hl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44c44b50da datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=49 identity=1196 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-br8hl subsys=endpoint level=info msg="Successful endpoint creation" containerID=44c44b50da datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=49 identity=1196 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-br8hl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 e0f0f570-9e27-4f7f-90c9-4f537f26fbd9 default }" containerID=4d8a763d0f38af9d120c94a8b104b3df1aa0a1dc66fcd545f9d0bdab074e40e5 datapathConfiguration="&{false false false false false }" interface=lxcc54f6b0fa287 k8sPodName=local-path-storage/helper-pod-create-pvc-28ade822-ef5f-45af-b3d3-552e92ac0662 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d8a763d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28ade822-ef5f-45af-b3d3-552e92ac0662 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d8a763d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28ade822-ef5f-45af-b3d3-552e92ac0662 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d8a763d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identity=1011 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28ade822-ef5f-45af-b3d3-552e92ac0662 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d8a763d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identity=1011 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28ade822-ef5f-45af-b3d3-552e92ac0662 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d8a763d0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1743 identity=1011 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28ade822-ef5f-45af-b3d3-552e92ac0662 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d8a763d0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1743 identity=1011 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28ade822-ef5f-45af-b3d3-552e92ac0662 subsys=daemon level=info msg="Delete endpoint request" containerID=4d8a763d0f endpointID=1743 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-28ade822-ef5f-45af-b3d3-552e92ac0662 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4d8a763d0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1743 identity=1011 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28ade822-ef5f-45af-b3d3-552e92ac0662 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 6938a702-29e2-40ac-9950-f1919f7be097 default }" containerID=14b336baf896aff8fd7d62ff99357c9551cdc464e19b90ae2fa713745d76842f datapathConfiguration="&{false false false false false }" interface=lxc8ba3b5259c37 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14b336baf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14b336baf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=14b336baf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 identity=858 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14b336baf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 identity=858 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14b336baf8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=353 identity=858 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=14b336baf8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=353 identity=858 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.196 32d7ecda-1abe-4d66-a7c8-de042a67fe6e default }" containerID=8701960beaaae13edf370755f07b44894d81e91e9364bcec7ccc1542bd0882f7 datapathConfiguration="&{false false false false false }" interface=lxc768c6e79b515 k8sPodName=openstack/keystone-api-5c7bb7b659-v9fzh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8701960bea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-api-5c7bb7b659-v9fzh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8701960bea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-api-5c7bb7b659-v9fzh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8701960bea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 identity=28234 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-api-5c7bb7b659-v9fzh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8701960bea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 identity=28234 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-api-5c7bb7b659-v9fzh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.96 7a869411-86d4-4b6b-8728-b78ed90bc594 default }" containerID=77f74f1941be296b3a4cbf521b13a7607590b75d4d917d52b772f46aef8e9a95 datapathConfiguration="&{false false false false false }" interface=lxc0933593f41d6 k8sPodName=openstack/keystone-credential-setup-8qhp9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77f74f1941 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-credential-setup-8qhp9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77f74f1941 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6e5a4870-c5ce-4abf-90bc-2ff1e733237e,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=6e5a4870-c5ce-4abf-90bc-2ff1e733237e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-credential-setup-8qhp9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6e5a4870-c5ce-4abf-90bc-2ff1e733237e;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=6e5a4870-c5ce-4abf-90bc-2ff1e733237e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77f74f1941 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identity=53557 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6e5a4870-c5ce-4abf-90bc-2ff1e733237e,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=6e5a4870-c5ce-4abf-90bc-2ff1e733237e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-credential-setup-8qhp9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77f74f1941 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identity=53557 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-credential-setup-8qhp9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8701960bea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2576 identity=28234 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-api-5c7bb7b659-v9fzh subsys=endpoint level=info msg="Successful endpoint creation" containerID=8701960bea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2576 identity=28234 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-api-5c7bb7b659-v9fzh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=77f74f1941 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=264 identity=53557 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-credential-setup-8qhp9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=77f74f1941 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=264 identity=53557 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-credential-setup-8qhp9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=77f74f1941 endpointID=264 k8sNamespace=openstack k8sPodName=keystone-credential-setup-8qhp9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6e5a4870-c5ce-4abf-90bc-2ff1e733237e k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=6e5a4870-c5ce-4abf-90bc-2ff1e733237e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=77f74f1941 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=264 identity=53557 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-credential-setup-8qhp9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 346ca7a5-ec41-4306-b295-7b94fe72e791 default }" containerID=3f00f499be7ba14b2c91728fd9fecb2246378ab4eea62ba14ce74820fa070b75 datapathConfiguration="&{false false false false false }" interface=lxc536e88893977 k8sPodName=openstack/keystone-db-init-tlb47 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f00f499be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-db-init-tlb47 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f00f499be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=191a3e1f-f50a-455d-aa08-9af243c3a197,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=191a3e1f-f50a-455d-aa08-9af243c3a197,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-db-init-tlb47 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3f00f499be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-db-init-tlb47 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=191a3e1f-f50a-455d-aa08-9af243c3a197;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=191a3e1f-f50a-455d-aa08-9af243c3a197;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f00f499be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=24203 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=191a3e1f-f50a-455d-aa08-9af243c3a197,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=191a3e1f-f50a-455d-aa08-9af243c3a197,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-db-init-tlb47 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f00f499be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=24203 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-db-init-tlb47 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3f00f499be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=743 identity=24203 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-db-init-tlb47 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f00f499be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=743 identity=24203 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-db-init-tlb47 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3f00f499be endpointID=743 k8sNamespace=openstack k8sPodName=keystone-db-init-tlb47 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=191a3e1f-f50a-455d-aa08-9af243c3a197 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=191a3e1f-f50a-455d-aa08-9af243c3a197 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3f00f499be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=743 identity=24203 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-db-init-tlb47 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 726a7a65-d8f9-44fc-8166-1c634d35b8c2 default }" containerID=ee46d0a3db8eb6b9af3e9ea002aee4fa4dd073f1ac5e4a2d7f388a6648bc418c datapathConfiguration="&{false false false false false }" interface=lxc3669f8a9f6d4 k8sPodName=openstack/keystone-fernet-setup-g875s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee46d0a3db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3861 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-g875s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee46d0a3db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3861 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cc69cdf0-30ba-45e9-8052-af8138ba731d,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=cc69cdf0-30ba-45e9-8052-af8138ba731d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-g875s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=cc69cdf0-30ba-45e9-8052-af8138ba731d;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=cc69cdf0-30ba-45e9-8052-af8138ba731d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee46d0a3db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3861 identity=36292 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cc69cdf0-30ba-45e9-8052-af8138ba731d,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=cc69cdf0-30ba-45e9-8052-af8138ba731d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-g875s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee46d0a3db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3861 identity=36292 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-g875s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ee46d0a3db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3861 identity=36292 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-g875s subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee46d0a3db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3861 identity=36292 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-g875s subsys=daemon level=info msg="Delete endpoint request" containerID=ee46d0a3db endpointID=3861 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-g875s subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=cc69cdf0-30ba-45e9-8052-af8138ba731d k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=cc69cdf0-30ba-45e9-8052-af8138ba731d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ee46d0a3db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3861 identity=36292 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-g875s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 b0718fc1-ae63-46d8-b482-2b9c688de55f default }" containerID=8a6817bf3f6e5e81e68392a89b54fa1e47434829668d3235aac040f2569f3be9 datapathConfiguration="&{false false false false false }" interface=lxc370b0e218093 k8sPodName=openstack/keystone-db-sync-p7v5n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a6817bf3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-db-sync-p7v5n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a6817bf3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0bdbccb8-c2a8-4950-badd-016beeac2d94,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=0bdbccb8-c2a8-4950-badd-016beeac2d94,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-db-sync-p7v5n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0bdbccb8-c2a8-4950-badd-016beeac2d94;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=0bdbccb8-c2a8-4950-badd-016beeac2d94;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a6817bf3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identity=45314 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0bdbccb8-c2a8-4950-badd-016beeac2d94,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=0bdbccb8-c2a8-4950-badd-016beeac2d94,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-db-sync-p7v5n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a6817bf3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identity=45314 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-db-sync-p7v5n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8a6817bf3f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1933 identity=45314 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-db-sync-p7v5n subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a6817bf3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1933 identity=45314 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-db-sync-p7v5n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8a6817bf3f endpointID=1933 k8sNamespace=openstack k8sPodName=keystone-db-sync-p7v5n subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0bdbccb8-c2a8-4950-badd-016beeac2d94 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=0bdbccb8-c2a8-4950-badd-016beeac2d94 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8a6817bf3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1933 identity=45314 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-db-sync-p7v5n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 4797bd7e-cfad-42b6-845c-c1427e84ab05 default }" containerID=a2cd00a627b87b2270c766d4f2d2ca91082cce0923718a55b04702d95fa50cc9 datapathConfiguration="&{false false false false false }" interface=lxc5e9bc2a5c729 k8sPodName=openstack/keystone-rabbit-init-r94q6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2cd00a627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-r94q6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2cd00a627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=860e1921-4e2e-45a9-9db7-1950564bf945,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=860e1921-4e2e-45a9-9db7-1950564bf945,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-r94q6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=860e1921-4e2e-45a9-9db7-1950564bf945;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=860e1921-4e2e-45a9-9db7-1950564bf945;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2cd00a627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 identity=26904 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=860e1921-4e2e-45a9-9db7-1950564bf945,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=860e1921-4e2e-45a9-9db7-1950564bf945,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-r94q6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2cd00a627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 identity=26904 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-r94q6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a2cd00a627 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1205 identity=26904 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-r94q6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2cd00a627 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1205 identity=26904 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-r94q6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a2cd00a627 endpointID=1205 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-r94q6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=860e1921-4e2e-45a9-9db7-1950564bf945 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=860e1921-4e2e-45a9-9db7-1950564bf945 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a2cd00a627 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1205 identity=26904 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-r94q6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 82bd906e-a199-48db-ae69-12d0d6e020b4 default }" containerID=ed1db7fcc16c5b264d8bd42c84b1bea3200ea89c5d3c78dbb104bd4ebb210404 datapathConfiguration="&{false false false false false }" interface=lxc4e464accdb22 k8sPodName=openstack/keystone-domain-manage-bkllj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed1db7fcc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2383 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-domain-manage-bkllj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed1db7fcc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2383 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=31809b9b-0e5d-4592-b387-aa256179aeaa,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=31809b9b-0e5d-4592-b387-aa256179aeaa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-domain-manage-bkllj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=31809b9b-0e5d-4592-b387-aa256179aeaa;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=31809b9b-0e5d-4592-b387-aa256179aeaa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed1db7fcc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2383 identity=43111 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=31809b9b-0e5d-4592-b387-aa256179aeaa,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=31809b9b-0e5d-4592-b387-aa256179aeaa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-domain-manage-bkllj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed1db7fcc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2383 identity=43111 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-domain-manage-bkllj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ed1db7fcc1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2383 identity=43111 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-domain-manage-bkllj subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed1db7fcc1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2383 identity=43111 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-domain-manage-bkllj subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.034158697093078304 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=ed1db7fcc1 endpointID=2383 k8sNamespace=openstack k8sPodName=keystone-domain-manage-bkllj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=31809b9b-0e5d-4592-b387-aa256179aeaa k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=31809b9b-0e5d-4592-b387-aa256179aeaa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ed1db7fcc1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2383 identity=43111 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-domain-manage-bkllj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 78593e40-4d0d-487e-9be4-aab279a3ef1c default }" containerID=85aadd43bdd8651a8ffe550c843a6d9bccb42a3b9926c70d277b2ba7a4f88e58 datapathConfiguration="&{false false false false false }" interface=lxc59822a0d9bdb k8sPodName=openstack/keystone-bootstrap-46wtg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85aadd43bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-bootstrap-46wtg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85aadd43bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6b0903f7-c21e-4443-a693-f0b3fd90766b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=6b0903f7-c21e-4443-a693-f0b3fd90766b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-bootstrap-46wtg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6b0903f7-c21e-4443-a693-f0b3fd90766b;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=6b0903f7-c21e-4443-a693-f0b3fd90766b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=85aadd43bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identity=1869 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6b0903f7-c21e-4443-a693-f0b3fd90766b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=6b0903f7-c21e-4443-a693-f0b3fd90766b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-bootstrap-46wtg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85aadd43bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identity=1869 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-bootstrap-46wtg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85aadd43bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1095 identity=1869 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-bootstrap-46wtg subsys=endpoint level=info msg="Successful endpoint creation" containerID=85aadd43bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1095 identity=1869 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-bootstrap-46wtg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=85aadd43bd endpointID=1095 k8sNamespace=openstack k8sPodName=keystone-bootstrap-46wtg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6b0903f7-c21e-4443-a693-f0b3fd90766b k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=6b0903f7-c21e-4443-a693-f0b3fd90766b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=85aadd43bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1095 identity=1869 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/keystone-bootstrap-46wtg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 2636b9ed-76e3-4a4a-b559-69712c6d4cfb default }" containerID=5cbcacc5ea2d67461c9daef8ee02fd1a98a58aded9b23faa136ce56ee97e4f63 datapathConfiguration="&{false false false false false }" interface=lxcfc084c3c138e k8sPodName=local-path-storage/helper-pod-create-pvc-fcc641a6-107a-409b-8e6d-8c451d9638d6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5cbcacc5ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fcc641a6-107a-409b-8e6d-8c451d9638d6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5cbcacc5ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fcc641a6-107a-409b-8e6d-8c451d9638d6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5cbcacc5ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 identity=1011 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fcc641a6-107a-409b-8e6d-8c451d9638d6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5cbcacc5ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 identity=1011 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fcc641a6-107a-409b-8e6d-8c451d9638d6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5cbcacc5ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=461 identity=1011 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fcc641a6-107a-409b-8e6d-8c451d9638d6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5cbcacc5ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=461 identity=1011 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fcc641a6-107a-409b-8e6d-8c451d9638d6 subsys=daemon level=info msg="Delete endpoint request" containerID=5cbcacc5ea endpointID=461 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fcc641a6-107a-409b-8e6d-8c451d9638d6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5cbcacc5ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=461 identity=1011 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fcc641a6-107a-409b-8e6d-8c451d9638d6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 71b2738e-624f-4edf-953c-0e1e6a850d65 default }" containerID=0fe30756350758c07a4afda7b60b5f4222f189e3e45fafd3608c69c1260596cf datapathConfiguration="&{false false false false false }" interface=lxc5457472f81dd k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fe3075635 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fe3075635 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0fe3075635 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=61684 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0fe3075635 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=61684 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0fe3075635 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1535 identity=61684 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fe3075635 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1535 identity=61684 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.18 ffddf5cf-6318-4a9c-a10f-4db091e10f97 default }" containerID=e2ece1ed93747e4f6f010047d945de459d12d607366f2ddc0322f0b2c3cbb054 datapathConfiguration="&{false false false false false }" interface=lxc26e954660668 k8sPodName=openstack/barbican-api-5d44957f85-tgbcl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2ece1ed93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-api-5d44957f85-tgbcl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2ece1ed93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-api-5d44957f85-tgbcl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e2ece1ed93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-api-5d44957f85-tgbcl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2ece1ed93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 identity=10847 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-api-5d44957f85-tgbcl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2ece1ed93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 identity=10847 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-api-5d44957f85-tgbcl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 3cf047de-8e65-40d5-b8b1-86866a5c5a41 default }" containerID=eadeaeb734d651de33092b6e95a789362cbb497837d4b7bf4b6d7b9f0c3e73db datapathConfiguration="&{false false false false false }" interface=lxc9c4748432e36 k8sPodName=openstack/barbican-db-init-rqhsb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eadeaeb734 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-rqhsb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eadeaeb734 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f18e09a7-c9d2-4f53-ac42-abd9064627fa,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=f18e09a7-c9d2-4f53-ac42-abd9064627fa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-rqhsb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f18e09a7-c9d2-4f53-ac42-abd9064627fa;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=f18e09a7-c9d2-4f53-ac42-abd9064627fa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eadeaeb734 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identity=44635 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f18e09a7-c9d2-4f53-ac42-abd9064627fa,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=f18e09a7-c9d2-4f53-ac42-abd9064627fa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-rqhsb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eadeaeb734 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identity=44635 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-rqhsb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e2ece1ed93 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1730 identity=10847 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-api-5d44957f85-tgbcl subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2ece1ed93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1730 identity=10847 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-api-5d44957f85-tgbcl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=eadeaeb734 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=88 identity=44635 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-rqhsb subsys=endpoint level=info msg="Successful endpoint creation" containerID=eadeaeb734 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=88 identity=44635 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-rqhsb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eadeaeb734 endpointID=88 k8sNamespace=openstack k8sPodName=barbican-db-init-rqhsb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f18e09a7-c9d2-4f53-ac42-abd9064627fa k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=f18e09a7-c9d2-4f53-ac42-abd9064627fa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=eadeaeb734 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=88 identity=44635 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-rqhsb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 55ba6639-3eb2-44f8-bd66-d7852ec8dd45 default }" containerID=17261513ce7fb7ae2bc7f5a5734cb80f53cabd6abad069fdea35a9c4928965da datapathConfiguration="&{false false false false false }" interface=lxce64a052bb3e6 k8sPodName=openstack/barbican-db-sync-wqd4r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17261513ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-sync-wqd4r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17261513ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1192ffa3-0066-4bb4-9e41-d31ecc123351,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=1192ffa3-0066-4bb4-9e41-d31ecc123351,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-sync-wqd4r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1192ffa3-0066-4bb4-9e41-d31ecc123351;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=1192ffa3-0066-4bb4-9e41-d31ecc123351;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=17261513ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 identity=22853 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1192ffa3-0066-4bb4-9e41-d31ecc123351,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=1192ffa3-0066-4bb4-9e41-d31ecc123351,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-sync-wqd4r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17261513ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 identity=22853 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-sync-wqd4r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=17261513ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=70 identity=22853 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-sync-wqd4r subsys=endpoint level=info msg="Successful endpoint creation" containerID=17261513ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=70 identity=22853 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-sync-wqd4r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=17261513ce endpointID=70 k8sNamespace=openstack k8sPodName=barbican-db-sync-wqd4r subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1192ffa3-0066-4bb4-9e41-d31ecc123351 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=1192ffa3-0066-4bb4-9e41-d31ecc123351 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=17261513ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=70 identity=22853 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-db-sync-wqd4r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 b730dc68-6307-44a3-8d26-d0083f561135 default }" containerID=34f3c0f3962b579e56f9a994ca7f83d972aca4344ebbf84f8a5d3e6cca6f57d2 datapathConfiguration="&{false false false false false }" interface=lxc37a67de2f251 k8sPodName=openstack/barbican-rabbit-init-96fbs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34f3c0f396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1116 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-96fbs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34f3c0f396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1116 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c2c11def-b9b0-400b-a0fc-225d50a1f381,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c2c11def-b9b0-400b-a0fc-225d50a1f381,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-96fbs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c2c11def-b9b0-400b-a0fc-225d50a1f381;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c2c11def-b9b0-400b-a0fc-225d50a1f381;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34f3c0f396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1116 identity=39865 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c2c11def-b9b0-400b-a0fc-225d50a1f381,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c2c11def-b9b0-400b-a0fc-225d50a1f381,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-96fbs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34f3c0f396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1116 identity=39865 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-96fbs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=34f3c0f396 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1116 identity=39865 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-96fbs subsys=endpoint level=info msg="Successful endpoint creation" containerID=34f3c0f396 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1116 identity=39865 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-96fbs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=34f3c0f396 endpointID=1116 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-96fbs subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c2c11def-b9b0-400b-a0fc-225d50a1f381 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c2c11def-b9b0-400b-a0fc-225d50a1f381 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=34f3c0f396 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1116 identity=39865 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-96fbs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 08fdc0d8-4b6e-4dbd-ac16-503ef4783253 default }" containerID=43c883e3e37720cb4ba24dbf9169933559d3cd946e1b67f3fd1bb88e0444a67a datapathConfiguration="&{false false false false false }" interface=lxcd7adaaefc08a k8sPodName=openstack/barbican-ks-service-hp6jf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43c883e3e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=360 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-ks-service-hp6jf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43c883e3e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=360 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3ebefca4-7921-4d26-83e9-5d8dd276492f,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=3ebefca4-7921-4d26-83e9-5d8dd276492f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-ks-service-hp6jf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3ebefca4-7921-4d26-83e9-5d8dd276492f;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=3ebefca4-7921-4d26-83e9-5d8dd276492f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=43c883e3e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=360 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-ks-service-hp6jf line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=43c883e3e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=360 identity=13293 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3ebefca4-7921-4d26-83e9-5d8dd276492f,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=3ebefca4-7921-4d26-83e9-5d8dd276492f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-ks-service-hp6jf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43c883e3e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=360 identity=13293 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-ks-service-hp6jf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=43c883e3e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=360 identity=13293 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-ks-service-hp6jf subsys=endpoint level=info msg="Successful endpoint creation" containerID=43c883e3e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=360 identity=13293 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-ks-service-hp6jf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=43c883e3e3 endpointID=360 k8sNamespace=openstack k8sPodName=barbican-ks-service-hp6jf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3ebefca4-7921-4d26-83e9-5d8dd276492f k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=3ebefca4-7921-4d26-83e9-5d8dd276492f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=43c883e3e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=360 identity=13293 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/barbican-ks-service-hp6jf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 aad0a868-03ee-4a9a-84a6-1e9d7e69b795 default }" containerID=5a07c6228ec34c7386d02fdaf8dc4d6997570fca5052b9caaebc2881e67c678c datapathConfiguration="&{false false false false false }" interface=lxc3633b7d70cda k8sPodName=openstack/barbican-ks-endpoints-rvm9s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a07c6228e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rvm9s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a07c6228e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=106081f5-0fee-4d75-81aa-92e011e6a82a,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=106081f5-0fee-4d75-81aa-92e011e6a82a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rvm9s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5a07c6228e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rvm9s line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=106081f5-0fee-4d75-81aa-92e011e6a82a;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=106081f5-0fee-4d75-81aa-92e011e6a82a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a07c6228e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 identity=40577 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=106081f5-0fee-4d75-81aa-92e011e6a82a,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=106081f5-0fee-4d75-81aa-92e011e6a82a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rvm9s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a07c6228e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 identity=40577 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rvm9s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a07c6228e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=700 identity=40577 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rvm9s subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a07c6228e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=700 identity=40577 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rvm9s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5a07c6228e endpointID=700 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-rvm9s subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=106081f5-0fee-4d75-81aa-92e011e6a82a k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=106081f5-0fee-4d75-81aa-92e011e6a82a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5a07c6228e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=700 identity=40577 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rvm9s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 674799a7-3fea-4e2f-9b0e-1cf433ccfcb0 default }" containerID=8cbd035b59659a1b706af7e72408c8a9feabb186fbc9d51270e4269fa8d2aa6b datapathConfiguration="&{false false false false false }" interface=lxcd575cd6ea277 k8sPodName=openstack/barbican-ks-user-mngfp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8cbd035b59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-user-mngfp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8cbd035b59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2ccf3ed7-7377-4108-8bfe-8963592e0d18,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=2ccf3ed7-7377-4108-8bfe-8963592e0d18,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-user-mngfp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2ccf3ed7-7377-4108-8bfe-8963592e0d18;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=2ccf3ed7-7377-4108-8bfe-8963592e0d18;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8cbd035b59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=423 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2ccf3ed7-7377-4108-8bfe-8963592e0d18,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=2ccf3ed7-7377-4108-8bfe-8963592e0d18,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-user-mngfp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8cbd035b59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=423 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-user-mngfp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8cbd035b59 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=22 identity=423 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-user-mngfp subsys=endpoint level=info msg="Successful endpoint creation" containerID=8cbd035b59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=22 identity=423 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-user-mngfp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8cbd035b59 endpointID=22 k8sNamespace=openstack k8sPodName=barbican-ks-user-mngfp subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2ccf3ed7-7377-4108-8bfe-8963592e0d18 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=2ccf3ed7-7377-4108-8bfe-8963592e0d18 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8cbd035b59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=22 identity=423 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-user-mngfp subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.189 002b312e-4af3-4bcc-96a8-07b5c68ea1ab default }" containerID=e4159f27b201f2d6f0ba0506b9fd4e34b9736aba7b285d9dfdef9157cdac0e10 datapathConfiguration="&{false false false false false }" interface=lxc426dc9ede95a k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p54hd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4159f27b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 ipv4=10.0.0.189 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p54hd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4159f27b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.189 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p54hd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4159f27b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identity=52989 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.189 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p54hd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4159f27b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identity=52989 ipv4=10.0.0.189 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p54hd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4159f27b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=599 identity=52989 ipv4=10.0.0.189 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p54hd subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4159f27b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=599 identity=52989 ipv4=10.0.0.189 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p54hd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.96 6639b283-f4bf-4f67-a374-d04370bca4b0 default }" containerID=df2a54db83bbb7b680f0dd4aeca869539ba0d308a42945df08db7ec9e4b4f2a9 datapathConfiguration="&{false false false false false }" interface=lxcd0f8ba5f64e5 k8sPodName=openstack/rook-ceph-detect-version-lzh92 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df2a54db83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lzh92 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df2a54db83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=583c5a2f-2543-40d9-aa25-ad895d4e188e,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=583c5a2f-2543-40d9-aa25-ad895d4e188e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lzh92 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=df2a54db83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lzh92 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=583c5a2f-2543-40d9-aa25-ad895d4e188e;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=583c5a2f-2543-40d9-aa25-ad895d4e188e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df2a54db83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identity=35323 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=583c5a2f-2543-40d9-aa25-ad895d4e188e,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=583c5a2f-2543-40d9-aa25-ad895d4e188e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lzh92 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df2a54db83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identity=35323 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lzh92 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df2a54db83 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=128 identity=35323 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lzh92 subsys=endpoint level=info msg="Successful endpoint creation" containerID=df2a54db83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=128 identity=35323 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lzh92 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df2a54db83 endpointID=128 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-lzh92 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=583c5a2f-2543-40d9-aa25-ad895d4e188e k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=583c5a2f-2543-40d9-aa25-ad895d4e188e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=df2a54db83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=128 identity=35323 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lzh92 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 c4bdbb27-4d2b-44d9-ac11-54b7248c9eef default }" containerID=73bda2ee945a442a199975cc66bfed7bb480cb763157fe3db5e7278ea6816cf6 datapathConfiguration="&{false false false false false }" interface=lxc565aa932990a k8sPodName=local-path-storage/helper-pod-create-pvc-c928ffe3-2cd2-473a-9b18-9f9a58d70ede labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73bda2ee94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3687 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c928ffe3-2cd2-473a-9b18-9f9a58d70ede subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73bda2ee94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3687 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c928ffe3-2cd2-473a-9b18-9f9a58d70ede subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73bda2ee94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3687 identity=1011 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c928ffe3-2cd2-473a-9b18-9f9a58d70ede oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73bda2ee94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3687 identity=1011 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c928ffe3-2cd2-473a-9b18-9f9a58d70ede subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73bda2ee94 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3687 identity=1011 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c928ffe3-2cd2-473a-9b18-9f9a58d70ede subsys=endpoint level=info msg="Successful endpoint creation" containerID=73bda2ee94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3687 identity=1011 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c928ffe3-2cd2-473a-9b18-9f9a58d70ede subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.170 cce93fa0-b8b2-414f-b982-3d262cb97668 default }" containerID=90ff02de137b6b92df8693016da4c9ba5be94b3d4557a23a700ba0b664e8dd0f datapathConfiguration="&{false false false false false }" interface=lxc3f1d84f45a50 k8sPodName=openstack/ceph-object-controller-detect-version-sncw6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90ff02de13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-sncw6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90ff02de13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=9b4d3daa-c784-443c-a137-fd8603a352b0,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=9b4d3daa-c784-443c-a137-fd8603a352b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-sncw6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=9b4d3daa-c784-443c-a137-fd8603a352b0;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=9b4d3daa-c784-443c-a137-fd8603a352b0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90ff02de13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 identity=51455 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=9b4d3daa-c784-443c-a137-fd8603a352b0,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=9b4d3daa-c784-443c-a137-fd8603a352b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-sncw6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90ff02de13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 identity=51455 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-sncw6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=90ff02de13 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=536 identity=51455 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-sncw6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=90ff02de13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=536 identity=51455 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-sncw6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=73bda2ee94 endpointID=3687 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c928ffe3-2cd2-473a-9b18-9f9a58d70ede subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=73bda2ee94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3687 identity=1011 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c928ffe3-2cd2-473a-9b18-9f9a58d70ede subsys=endpoint level=info msg="Delete endpoint request" containerID=90ff02de13 endpointID=536 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-sncw6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=9b4d3daa-c784-443c-a137-fd8603a352b0 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=9b4d3daa-c784-443c-a137-fd8603a352b0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=90ff02de13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=536 identity=51455 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-sncw6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 d1a23564-e6d5-4ef0-830a-66982bf114d9 default }" containerID=09c5615c423d31ad6f98dfa45dfb4f12db3951b6cacdc942f3b83243bd6d5bca datapathConfiguration="&{false false false false false }" interface=lxc4cd3cf960c18 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09c5615c42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09c5615c42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09c5615c42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identity=32188 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=09c5615c42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identity=32188 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=09c5615c42 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=967 identity=32188 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=09c5615c42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=967 identity=32188 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.110 4e704010-4480-4547-a97e-07264e853bba default }" containerID=1643b06d9d8e253f2dde1bda8d98c1713db9a131e14c75f9b1f38f65cb571082 datapathConfiguration="&{false false false false false }" interface=lxca934354827e3 k8sPodName=openstack/glance-db-init-5826c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1643b06d9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-db-init-5826c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1643b06d9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=71d19b9e-e757-4b65-a41c-5b56398bdfcd,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=71d19b9e-e757-4b65-a41c-5b56398bdfcd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-db-init-5826c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=71d19b9e-e757-4b65-a41c-5b56398bdfcd;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=71d19b9e-e757-4b65-a41c-5b56398bdfcd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1643b06d9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identity=42860 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=71d19b9e-e757-4b65-a41c-5b56398bdfcd,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=71d19b9e-e757-4b65-a41c-5b56398bdfcd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-db-init-5826c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1643b06d9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identity=42860 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-db-init-5826c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1643b06d9d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=512 identity=42860 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-db-init-5826c subsys=endpoint level=info msg="Successful endpoint creation" containerID=1643b06d9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=512 identity=42860 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-db-init-5826c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1643b06d9d endpointID=512 k8sNamespace=openstack k8sPodName=glance-db-init-5826c subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=71d19b9e-e757-4b65-a41c-5b56398bdfcd k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=71d19b9e-e757-4b65-a41c-5b56398bdfcd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1643b06d9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=512 identity=42860 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-db-init-5826c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 452560a1-276a-4d09-b4fc-3c1ce4c6a96d default }" containerID=5d2b5095117e7724c95e2fab068bcf2d32af00df8016d5b4e7b1d7bbc4efa98c datapathConfiguration="&{false false false false false }" interface=lxc13711fec44b2 k8sPodName=openstack/glance-db-sync-kg4mb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d2b509511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2153 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-sync-kg4mb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d2b509511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2153 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=38454213-3f6c-4e27-a25e-2127d2eb96ba,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=38454213-3f6c-4e27-a25e-2127d2eb96ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-sync-kg4mb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=38454213-3f6c-4e27-a25e-2127d2eb96ba;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=38454213-3f6c-4e27-a25e-2127d2eb96ba;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d2b509511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2153 identity=38939 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=38454213-3f6c-4e27-a25e-2127d2eb96ba,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=38454213-3f6c-4e27-a25e-2127d2eb96ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-sync-kg4mb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d2b509511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2153 identity=38939 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-sync-kg4mb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d2b509511 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2153 identity=38939 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-sync-kg4mb subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d2b509511 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2153 identity=38939 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-sync-kg4mb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.3 87e4f49b-5186-4650-98d6-102a932aaf9f default }" containerID=683d4dbf7a473bd8c445353a4dcf22a5d8cc1623768f01e130ef75f295870e92 datapathConfiguration="&{false false false false false }" interface=lxc3fadc721f03a k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zj8cz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=683d4dbf7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3467 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zj8cz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=683d4dbf7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3467 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zj8cz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=683d4dbf7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3467 identity=12927 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zj8cz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=683d4dbf7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3467 identity=12927 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zj8cz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 b5d101dd-03d9-424f-a2d0-58e53a0988be default }" containerID=ea1cf094d5b49954c4b0da54832ae52928da706db61776fc1a20833194e63428 datapathConfiguration="&{false false false false false }" interface=lxcf122eb5428cd k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pnmqp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea1cf094d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pnmqp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea1cf094d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pnmqp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea1cf094d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identity=40589 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pnmqp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea1cf094d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identity=40589 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pnmqp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=683d4dbf7a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3467 identity=12927 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zj8cz subsys=endpoint level=info msg="Successful endpoint creation" containerID=683d4dbf7a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3467 identity=12927 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zj8cz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ea1cf094d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1150 identity=40589 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pnmqp subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea1cf094d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1150 identity=40589 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pnmqp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5d2b509511 endpointID=2153 k8sNamespace=openstack k8sPodName=glance-db-sync-kg4mb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=38454213-3f6c-4e27-a25e-2127d2eb96ba k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=38454213-3f6c-4e27-a25e-2127d2eb96ba k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5d2b509511 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2153 identity=38939 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-sync-kg4mb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 a7c702ba-2b91-466b-ab2f-04d3f1739efe default }" containerID=5c8c386d68c2024582e2796caeccaa80ec0f271fda373463f92b62f24375f18f datapathConfiguration="&{false false false false false }" interface=lxcd83e1944d776 k8sPodName=openstack/glance-rabbit-init-hrw7c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c8c386d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3636 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/glance-rabbit-init-hrw7c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c8c386d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3636 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d33632da-b5cb-41bd-bbd3-e3efd432589e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d33632da-b5cb-41bd-bbd3-e3efd432589e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/glance-rabbit-init-hrw7c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d33632da-b5cb-41bd-bbd3-e3efd432589e;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d33632da-b5cb-41bd-bbd3-e3efd432589e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5c8c386d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3636 identity=2499 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d33632da-b5cb-41bd-bbd3-e3efd432589e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d33632da-b5cb-41bd-bbd3-e3efd432589e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/glance-rabbit-init-hrw7c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c8c386d68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3636 identity=2499 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/glance-rabbit-init-hrw7c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c8c386d68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3636 identity=2499 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/glance-rabbit-init-hrw7c subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c8c386d68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3636 identity=2499 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/glance-rabbit-init-hrw7c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5c8c386d68 endpointID=3636 k8sNamespace=openstack k8sPodName=glance-rabbit-init-hrw7c subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d33632da-b5cb-41bd-bbd3-e3efd432589e k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d33632da-b5cb-41bd-bbd3-e3efd432589e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5c8c386d68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3636 identity=2499 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/glance-rabbit-init-hrw7c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 55ac95c2-6f9a-4f9d-8ba8-e9e07a008e3f default }" containerID=41d51055ec9df9529153b1dbdfcaffc1138eb82e2b574a386d9be83957c0f000 datapathConfiguration="&{false false false false false }" interface=lxc76a3d639928a k8sPodName=openstack/glance-ks-service-2w5wt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41d51055ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3648 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-2w5wt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41d51055ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3648 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3f0b92f4-dae6-4220-a6be-fe353af30471,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=3f0b92f4-dae6-4220-a6be-fe353af30471,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-2w5wt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3f0b92f4-dae6-4220-a6be-fe353af30471;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=3f0b92f4-dae6-4220-a6be-fe353af30471;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41d51055ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3648 identity=19486 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3f0b92f4-dae6-4220-a6be-fe353af30471,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=3f0b92f4-dae6-4220-a6be-fe353af30471,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-2w5wt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41d51055ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3648 identity=19486 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-2w5wt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=41d51055ec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3648 identity=19486 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-2w5wt subsys=endpoint level=info msg="Successful endpoint creation" containerID=41d51055ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3648 identity=19486 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-2w5wt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=41d51055ec endpointID=3648 k8sNamespace=openstack k8sPodName=glance-ks-service-2w5wt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3f0b92f4-dae6-4220-a6be-fe353af30471 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=3f0b92f4-dae6-4220-a6be-fe353af30471 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=41d51055ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3648 identity=19486 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-service-2w5wt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 0b4715a3-2115-4152-82ef-3fd1847fb13a default }" containerID=a5eac76a2b0fcdea5a6f8e3c589c02d060a28deb35975cfe2d0655873934e48d datapathConfiguration="&{false false false false false }" interface=lxc194ae4b5cb08 k8sPodName=openstack/glance-ks-endpoints-5qvjd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5eac76a2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1500 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-5qvjd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5eac76a2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1500 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f3cc68ac-ee47-4937-9f55-5caf08f177ee,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f3cc68ac-ee47-4937-9f55-5caf08f177ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-5qvjd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a5eac76a2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1500 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-5qvjd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f3cc68ac-ee47-4937-9f55-5caf08f177ee;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f3cc68ac-ee47-4937-9f55-5caf08f177ee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5eac76a2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1500 identity=16678 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f3cc68ac-ee47-4937-9f55-5caf08f177ee,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f3cc68ac-ee47-4937-9f55-5caf08f177ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-5qvjd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5eac76a2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1500 identity=16678 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-5qvjd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5eac76a2b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1500 identity=16678 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-5qvjd subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5eac76a2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1500 identity=16678 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-5qvjd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a5eac76a2b endpointID=1500 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-5qvjd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f3cc68ac-ee47-4937-9f55-5caf08f177ee k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f3cc68ac-ee47-4937-9f55-5caf08f177ee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a5eac76a2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1500 identity=16678 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-5qvjd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 40c01b5c-eedc-48fb-95a1-782a86b6b4ec default }" containerID=0815518cdad8cdfccb341da97a36535bfc689714b58cd1d79075908369feb66d datapathConfiguration="&{false false false false false }" interface=lxcebb61cb91c8d k8sPodName=openstack/glance-ks-user-zf6mt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0815518cda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-zf6mt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0815518cda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d2171d33-a7a5-4bfc-9433-1d01d133de76,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d2171d33-a7a5-4bfc-9433-1d01d133de76,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-zf6mt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d2171d33-a7a5-4bfc-9433-1d01d133de76;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=d2171d33-a7a5-4bfc-9433-1d01d133de76;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0815518cda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 identity=57219 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d2171d33-a7a5-4bfc-9433-1d01d133de76,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d2171d33-a7a5-4bfc-9433-1d01d133de76,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-zf6mt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0815518cda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 identity=57219 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-zf6mt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0815518cda datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1374 identity=57219 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-zf6mt subsys=endpoint level=info msg="Successful endpoint creation" containerID=0815518cda datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1374 identity=57219 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-zf6mt subsys=daemon level=info msg="Delete endpoint request" containerID=0815518cda endpointID=1374 k8sNamespace=openstack k8sPodName=glance-ks-user-zf6mt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d2171d33-a7a5-4bfc-9433-1d01d133de76 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=d2171d33-a7a5-4bfc-9433-1d01d133de76 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0815518cda datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1374 identity=57219 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-ks-user-zf6mt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 592f7285-8455-4421-94d7-79c1adc7a839 default }" containerID=e66fbdc1a7c8a3e056904e58f4e61bef99ac93193381ced863c38d05e6569026 datapathConfiguration="&{false false false false false }" interface=lxce33c1fda94aa k8sPodName=openstack/glance-metadefs-load-bxpqz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e66fbdc1a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3898 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-bxpqz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e66fbdc1a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3898 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e8becbc5-fd10-4c61-9dca-5ea47f60ea16,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=e8becbc5-fd10-4c61-9dca-5ea47f60ea16,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-bxpqz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e8becbc5-fd10-4c61-9dca-5ea47f60ea16;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=e8becbc5-fd10-4c61-9dca-5ea47f60ea16;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e66fbdc1a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3898 identity=306 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e8becbc5-fd10-4c61-9dca-5ea47f60ea16,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=e8becbc5-fd10-4c61-9dca-5ea47f60ea16,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-bxpqz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e66fbdc1a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3898 identity=306 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-bxpqz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e66fbdc1a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3898 identity=306 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-bxpqz subsys=endpoint level=info msg="Successful endpoint creation" containerID=e66fbdc1a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3898 identity=306 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-bxpqz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e66fbdc1a7 endpointID=3898 k8sNamespace=openstack k8sPodName=glance-metadefs-load-bxpqz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e8becbc5-fd10-4c61-9dca-5ea47f60ea16 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=e8becbc5-fd10-4c61-9dca-5ea47f60ea16 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e66fbdc1a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3898 identity=306 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-metadefs-load-bxpqz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 b7666741-06f1-4e8e-98ee-37a24b7b5e43 default }" containerID=ab8059e78b24ffa9456eb3696bb14582a4a91160ced46048d10898a42aa42398 datapathConfiguration="&{false false false false false }" interface=lxc7e2544318071 k8sPodName=openstack/glance-storage-init-dk7jw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab8059e78b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2632 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-storage-init-dk7jw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab8059e78b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2632 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e05e45f9-bde7-4d69-bdb6-e947efea25ae,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=e05e45f9-bde7-4d69-bdb6-e947efea25ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-storage-init-dk7jw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e05e45f9-bde7-4d69-bdb6-e947efea25ae;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=e05e45f9-bde7-4d69-bdb6-e947efea25ae;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab8059e78b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2632 identity=53665 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e05e45f9-bde7-4d69-bdb6-e947efea25ae,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=e05e45f9-bde7-4d69-bdb6-e947efea25ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-storage-init-dk7jw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab8059e78b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2632 identity=53665 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-storage-init-dk7jw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ab8059e78b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2632 identity=53665 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-storage-init-dk7jw subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab8059e78b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2632 identity=53665 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-storage-init-dk7jw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ab8059e78b endpointID=2632 k8sNamespace=openstack k8sPodName=glance-storage-init-dk7jw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e05e45f9-bde7-4d69-bdb6-e947efea25ae k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=e05e45f9-bde7-4d69-bdb6-e947efea25ae k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ab8059e78b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2632 identity=53665 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-storage-init-dk7jw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 f80bea9d-b23c-4887-9db1-f63cd26659ec default }" containerID=a3c4ec70e127b61b74b7a411d90422a323a23708c197bc95c874df2b50dfee2d datapathConfiguration="&{false false false false false }" interface=lxc28031a8516f8 k8sPodName=openstack/glance-api-5b8674d845-84pfz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3c4ec70e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2442 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-api-5b8674d845-84pfz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3c4ec70e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2442 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-api-5b8674d845-84pfz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a3c4ec70e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2442 identity=53973 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-api-5b8674d845-84pfz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a3c4ec70e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2442 identity=53973 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-api-5b8674d845-84pfz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a3c4ec70e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2442 identity=53973 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-api-5b8674d845-84pfz subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3c4ec70e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2442 identity=53973 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-api-5b8674d845-84pfz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.67 165044d7-2fdf-4f58-b3d6-664776bcc1d3 default }" containerID=b7593d0393685dd852bf9b904faa843a3e3d04d024834ed5129262145ca406cc datapathConfiguration="&{false false false false false }" interface=lxc92c75e189668 k8sPodName=openstack/staffeln-api-68c99dfd6-z7pl7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7593d0393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-api-68c99dfd6-z7pl7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7593d0393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-api-68c99dfd6-z7pl7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b7593d0393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-api-68c99dfd6-z7pl7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7593d0393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=33145 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-api-68c99dfd6-z7pl7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7593d0393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=33145 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-api-68c99dfd6-z7pl7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 e706b070-0165-4869-aefb-6177072eb719 default }" containerID=6085327ec644a7413157422b0744bb85fc5f294cdda40b920c472d6b6be662b2 datapathConfiguration="&{false false false false false }" interface=lxc54983cb644f6 k8sPodName=openstack/staffeln-db-init-k9cpx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6085327ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-db-init-k9cpx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6085327ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=25cc007f-3047-4849-8a53-5e37b53b0fa7,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=25cc007f-3047-4849-8a53-5e37b53b0fa7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-db-init-k9cpx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.225 85edf7a4-fae2-4c59-940e-6ef50dc6e8db default }" containerID=9c1243c1ea21baa7a3a54cce32127fdbd9c740c158edeec6b0693909cab399ba datapathConfiguration="&{false false false false false }" interface=lxc3338e5849455 k8sPodName=openstack/staffeln-conductor-85676b797c-4hzdh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c1243c1ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/staffeln-conductor-85676b797c-4hzdh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c1243c1ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/staffeln-conductor-85676b797c-4hzdh subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=25cc007f-3047-4849-8a53-5e37b53b0fa7;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=25cc007f-3047-4849-8a53-5e37b53b0fa7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6085327ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identity=7010 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=25cc007f-3047-4849-8a53-5e37b53b0fa7,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=25cc007f-3047-4849-8a53-5e37b53b0fa7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-db-init-k9cpx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6085327ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identity=7010 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-db-init-k9cpx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c1243c1ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 identity=46733 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/staffeln-conductor-85676b797c-4hzdh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c1243c1ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 identity=46733 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/staffeln-conductor-85676b797c-4hzdh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7593d0393 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=57 identity=33145 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-api-68c99dfd6-z7pl7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7593d0393 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=57 identity=33145 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-api-68c99dfd6-z7pl7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9c1243c1ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=162 identity=46733 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/staffeln-conductor-85676b797c-4hzdh subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c1243c1ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=162 identity=46733 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/staffeln-conductor-85676b797c-4hzdh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6085327ec6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=772 identity=7010 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-db-init-k9cpx subsys=endpoint level=info msg="Successful endpoint creation" containerID=6085327ec6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=772 identity=7010 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-db-init-k9cpx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6085327ec6 endpointID=772 k8sNamespace=openstack k8sPodName=staffeln-db-init-k9cpx subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=25cc007f-3047-4849-8a53-5e37b53b0fa7 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=25cc007f-3047-4849-8a53-5e37b53b0fa7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=6085327ec6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=772 identity=7010 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-db-init-k9cpx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 ce07d5e7-3257-453f-bbe3-17204f20f53d default }" containerID=dc95770ca737c6edda5b6a0e256595696bdb34ef41355ebccffd592a5e4d63c2 datapathConfiguration="&{false false false false false }" interface=lxcc15cb17fa046 k8sPodName=openstack/staffeln-db-sync-pvsxq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc95770ca7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3968 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-db-sync-pvsxq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc95770ca7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3968 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=778ca8e0-2c6b-46b5-bb47-10ccaf02b5fe,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=778ca8e0-2c6b-46b5-bb47-10ccaf02b5fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-db-sync-pvsxq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=778ca8e0-2c6b-46b5-bb47-10ccaf02b5fe;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=778ca8e0-2c6b-46b5-bb47-10ccaf02b5fe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc95770ca7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3968 identity=49119 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=778ca8e0-2c6b-46b5-bb47-10ccaf02b5fe,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=778ca8e0-2c6b-46b5-bb47-10ccaf02b5fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-db-sync-pvsxq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc95770ca7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3968 identity=49119 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-db-sync-pvsxq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dc95770ca7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3968 identity=49119 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-db-sync-pvsxq subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc95770ca7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3968 identity=49119 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-db-sync-pvsxq subsys=daemon