level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.081099ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="94.642µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.09835ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.091µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=96.141583ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.96µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="15.101µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="53.531µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="65.752µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="95.503µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="393.341µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.68µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=42.620499ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.111141ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="76.102µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="50.861µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="237.546µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="104.553µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="69.021µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=49.464714ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="81.652µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="10.781µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.26µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.70.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.75684ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.04µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.978905ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.66µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.412237ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.33µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.23µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.7µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="21.9µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="17.501µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="45.132µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="255.437µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="1.831µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.84µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="203.325µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="754.491µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.181892ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.33µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="25.891µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.70 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.70 ipAddr.ipv6="" k8sNodeIP=162.253.55.70 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.70" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.97" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.70" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.70} {CiliumInternalIP 10.0.0.97}] 10.0.0.0/24 [] [] 10.0.0.165 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:44153" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.505910008s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="19.621µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Start hook executed" duration="10.7µs" function="*job.group.Start" subsys=hive level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="51.072µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="11.92µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3509 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3509 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3509 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.59172958s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=300.557438ms file-path=/var/run/cilium/state/templates/6f96d8b85b8163f4e5c6d5b4b029339cf1090ccd26c365e742ad83947a4e5aec/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3509 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 221820a1-4eb7-4230-8ea7-a4c1fd11a0dc default }" containerID=9a70e391907c9d1870d6c9b08d81f722ebdc0ed197f2d5837df2e4976c6020c6 datapathConfiguration="&{false false false false false }" interface=lxc2fce27c275cf k8sPodName=kube-system/coredns-7c96b6546b-bwcjb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a70e39190 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2649 ipv4=10.0.0.67 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bwcjb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a70e39190 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2649 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.67 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bwcjb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a70e39190 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2649 identity=8098 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.67 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bwcjb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a70e39190 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2649 identity=8098 ipv4=10.0.0.67 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bwcjb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=749 ipv4=10.0.0.165 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=749 identityLabels="reserved:health" ipv4=10.0.0.165 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=749 identity=4 identityLabels="reserved:health" ipv4=10.0.0.165 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 d422524e-4d1a-45ce-8bca-18285c03b4ba default }" containerID=d0fdb36ae9f96ec62ac7f2d7ed6f70f680115ac06914dd90a4979a05de1d0049 datapathConfiguration="&{false false false false false }" interface=lxc4bf52a024404 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ztl5v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0fdb36ae9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1853 ipv4=10.0.0.147 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ztl5v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0fdb36ae9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1853 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=b36ac400-fb5d-47d7-9810-1ad45d29f058,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=b36ac400-fb5d-47d7-9810-1ad45d29f058,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.147 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ztl5v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=b36ac400-fb5d-47d7-9810-1ad45d29f058;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=b36ac400-fb5d-47d7-9810-1ad45d29f058;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d0fdb36ae9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1853 identity=23560 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=b36ac400-fb5d-47d7-9810-1ad45d29f058,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=b36ac400-fb5d-47d7-9810-1ad45d29f058,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.147 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ztl5v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0fdb36ae9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1853 identity=23560 ipv4=10.0.0.147 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ztl5v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.035536325s file-path=/var/run/cilium/state/templates/f530bb443e73d709949cb92cd25989f2832c591087d6abbc6c7cb3dc0cde2262/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=9a70e39190 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2649 identity=8098 ipv4=10.0.0.67 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bwcjb subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a70e39190 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2649 identity=8098 ipv4=10.0.0.67 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bwcjb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d0fdb36ae9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1853 identity=23560 ipv4=10.0.0.147 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ztl5v subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0fdb36ae9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1853 identity=23560 ipv4=10.0.0.147 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ztl5v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=749 identity=4 ipv4=10.0.0.165 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d0fdb36ae9 endpointID=1853 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-ztl5v subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=b36ac400-fb5d-47d7-9810-1ad45d29f058 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=b36ac400-fb5d-47d7-9810-1ad45d29f058 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=d0fdb36ae9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1853 identity=23560 ipv4=10.0.0.147 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ztl5v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 dd9bbd0d-49f6-4018-a2b1-0ea1c9bd83b9 default }" containerID=2102e13765682c6bd7da6e4dcc34051d28f568a55f9b155b37c67d806a0bdcc3 datapathConfiguration="&{false false false false false }" interface=lxc7161af0a1ed1 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5tnjv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2102e13765 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 ipv4=10.0.0.201 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5tnjv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2102e13765 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.201 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5tnjv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2102e13765 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 identity=47678 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.201 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5tnjv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2102e13765 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1278 identity=47678 ipv4=10.0.0.201 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5tnjv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2102e13765 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1278 identity=47678 ipv4=10.0.0.201 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5tnjv subsys=endpoint level=info msg="Successful endpoint creation" containerID=2102e13765 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1278 identity=47678 ipv4=10.0.0.201 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5tnjv subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3509 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03509 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03509 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03509 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03509:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3509 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 0091544c-0475-491a-a42d-69b2614d6a5a default }" containerID=e4f7e8610fe5e9104496c61420198f86052bb62d08698fbb16683546f010c4b6 datapathConfiguration="&{false false false false false }" interface=lxca0ed5465d823 k8sPodName=kube-system/coredns-67659f764b-rjs2h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4f7e8610f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 ipv4=10.0.0.86 ipv6= k8sPodName=kube-system/coredns-67659f764b-rjs2h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4f7e8610f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.86 ipv6= k8sPodName=kube-system/coredns-67659f764b-rjs2h subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e4f7e8610f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 identity=8098 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.86 ipv6= k8sPodName=kube-system/coredns-67659f764b-rjs2h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4f7e8610f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 identity=8098 ipv4=10.0.0.86 ipv6= k8sPodName=kube-system/coredns-67659f764b-rjs2h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4f7e8610f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=989 identity=8098 ipv4=10.0.0.86 ipv6= k8sPodName=kube-system/coredns-67659f764b-rjs2h subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4f7e8610f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=989 identity=8098 ipv4=10.0.0.86 ipv6= k8sPodName=kube-system/coredns-67659f764b-rjs2h subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.63 db57270f-21a3-4ed1-a84b-4467091a0b3e default }" containerID=fa662f8ed83ef82324a1fc999d6041037f0d2ebee4fc9bfd8e0805b025ea4366 datapathConfiguration="&{false false false false false }" interface=lxc81a037d2fcae k8sPodName=kube-system/coredns-67659f764b-98gjx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa662f8ed8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1699 ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-67659f764b-98gjx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa662f8ed8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1699 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-67659f764b-98gjx subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fa662f8ed8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1699 identity=8098 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-67659f764b-98gjx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa662f8ed8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1699 identity=8098 ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-67659f764b-98gjx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa662f8ed8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1699 identity=8098 ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-67659f764b-98gjx subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa662f8ed8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1699 identity=8098 ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-67659f764b-98gjx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.134 6a1ec7e0-3247-4904-9825-e1fd0771e385 default }" containerID=b83218ed8bf30bd3417affabf45843b23589c59ed7ed619d5b87c621af002f38 datapathConfiguration="&{false false false false false }" interface=lxc0f1e9cca5544 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zrstq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b83218ed8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zrstq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b83218ed8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zrstq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b83218ed8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identity=41756 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zrstq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b83218ed8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identity=41756 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zrstq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b83218ed8b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=61 identity=41756 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zrstq subsys=endpoint level=info msg="Successful endpoint creation" containerID=b83218ed8b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=61 identity=41756 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zrstq subsys=daemon level=info msg="Delete endpoint request" containerID=9a70e39190 endpointID=2649 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-bwcjb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=9a70e39190 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2649 identity=8098 ipv4=10.0.0.67 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bwcjb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 8be1ef5c-28d0-4c9c-9d10-2af91348f4d8 default }" containerID=f322ecc6e7ddf61aba0aa8525a239f3018d695fc979ec3977fef880020917aa7 datapathConfiguration="&{false false false false false }" interface=lxc345a22b36f39 k8sPodName=cert-manager/cert-manager-75c4c745bc-q6gww labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f322ecc6e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-q6gww subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f322ecc6e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-q6gww subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f322ecc6e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 identity=30359 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-q6gww oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f322ecc6e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 identity=30359 ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-q6gww subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 1d3e9b1e-d00c-48aa-87c2-b8485cd6ae9f default }" containerID=1bbff332df1e2d3ff1404555232af8d0ed8430faac20b3a9cd650cd38a9942f7 datapathConfiguration="&{false false false false false }" interface=lxc111e50286223 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nhfz8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bbff332df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3472 ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nhfz8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bbff332df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3472 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nhfz8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.76 5010d7e3-1f10-46fc-ae03-25ec80c16040 default }" containerID=4ad8ab9963d0a1bb9b11d39f6370bc3f390333670ea3cd14388a2ad9302c47c0 datapathConfiguration="&{false false false false false }" interface=lxce0b8cc303eb0 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ctzff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ad8ab9963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 ipv4=10.0.0.76 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ctzff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ad8ab9963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.76 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ctzff subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=1bbff332df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3472 identity=5137 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nhfz8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1bbff332df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3472 identity=5137 ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nhfz8 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ad8ab9963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identity=30947 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.76 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ctzff oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ad8ab9963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identity=30947 ipv4=10.0.0.76 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ctzff subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f322ecc6e7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=208 identity=30359 ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-q6gww subsys=endpoint level=info msg="Successful endpoint creation" containerID=f322ecc6e7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=208 identity=30359 ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-q6gww subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1bbff332df datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3472 identity=5137 ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nhfz8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bbff332df datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3472 identity=5137 ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nhfz8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4ad8ab9963 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=265 identity=30947 ipv4=10.0.0.76 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ctzff subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ad8ab9963 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=265 identity=30947 ipv4=10.0.0.76 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ctzff subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.179 5c6ebe11-4145-4d65-a817-219558359a48 default }" containerID=f9bbf44ee36dee0f1a44ad4f5027c531fb935b69264091222d667651cb394bf6 datapathConfiguration="&{false false false false false }" interface=lxc727aea9710ab k8sPodName=cert-manager/cert-manager-startupapicheck-kr9hf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9bbf44ee3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 ipv4=10.0.0.179 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kr9hf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9bbf44ee3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f6a711be-8b95-418d-ba7f-159d036a4d47,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f6a711be-8b95-418d-ba7f-159d036a4d47,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.179 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kr9hf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=f6a711be-8b95-418d-ba7f-159d036a4d47;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=f6a711be-8b95-418d-ba7f-159d036a4d47;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9bbf44ee3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 identity=5246 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f6a711be-8b95-418d-ba7f-159d036a4d47,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f6a711be-8b95-418d-ba7f-159d036a4d47,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.179 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kr9hf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9bbf44ee3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 identity=5246 ipv4=10.0.0.179 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kr9hf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9bbf44ee3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3075 identity=5246 ipv4=10.0.0.179 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kr9hf subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9bbf44ee3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3075 identity=5246 ipv4=10.0.0.179 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kr9hf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f9bbf44ee3 endpointID=3075 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-kr9hf subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=f6a711be-8b95-418d-ba7f-159d036a4d47 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=f6a711be-8b95-418d-ba7f-159d036a4d47 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=f9bbf44ee3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3075 identity=5246 ipv4=10.0.0.179 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kr9hf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 5fcef0f0-eda8-40af-b1c2-1c098233b4fe default }" containerID=3a7b526a9e9b27ba629dae16cac310eab482354761def2d17cab9d3fad66a01d datapathConfiguration="&{false false false false false }" interface=lxc563aa8228e5b k8sPodName=ingress-nginx/ingress-nginx-admission-create-lpxqj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a7b526a9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lpxqj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a7b526a9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=43e5c740-ece2-4cc6-bcbd-f1230c1b5ed0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=43e5c740-ece2-4cc6-bcbd-f1230c1b5ed0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lpxqj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=43e5c740-ece2-4cc6-bcbd-f1230c1b5ed0;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=43e5c740-ece2-4cc6-bcbd-f1230c1b5ed0;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a7b526a9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=18498 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=43e5c740-ece2-4cc6-bcbd-f1230c1b5ed0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=43e5c740-ece2-4cc6-bcbd-f1230c1b5ed0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lpxqj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3a7b526a9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=18498 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lpxqj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a7b526a9e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=52 identity=18498 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lpxqj subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a7b526a9e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=52 identity=18498 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lpxqj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3a7b526a9e endpointID=52 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-lpxqj subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=43e5c740-ece2-4cc6-bcbd-f1230c1b5ed0 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=43e5c740-ece2-4cc6-bcbd-f1230c1b5ed0 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=3a7b526a9e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=52 identity=18498 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lpxqj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 9a692cc9-df19-44a9-b203-f96f89cffc5a default }" containerID=6579175ea1177be62ec73b0971e4c2e2e0edd1f1eb7767c7cbfe55962ff3aeca datapathConfiguration="&{false false false false false }" interface=lxce7025f395c1b k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7rngq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6579175ea1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 ipv4=10.0.0.39 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7rngq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6579175ea1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.39 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7rngq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6579175ea1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 identity=22949 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.39 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7rngq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6579175ea1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 identity=22949 ipv4=10.0.0.39 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7rngq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6579175ea1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3255 identity=22949 ipv4=10.0.0.39 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7rngq subsys=endpoint level=info msg="Successful endpoint creation" containerID=6579175ea1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3255 identity=22949 ipv4=10.0.0.39 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7rngq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.162 6b9ea1c1-16dc-45ed-b995-04681bb88a19 default }" containerID=ce7e5a8684add0b9efc0ba14fa0aa5973c3e4605667cd60b10c426003168d458 datapathConfiguration="&{false false false false false }" interface=lxc30d636c18026 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-td687 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce7e5a8684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 ipv4=10.0.0.162 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-td687 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce7e5a8684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f20cc407-5dff-4d25-9370-2c3b60afcca2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=f20cc407-5dff-4d25-9370-2c3b60afcca2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.162 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-td687 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=f20cc407-5dff-4d25-9370-2c3b60afcca2;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=f20cc407-5dff-4d25-9370-2c3b60afcca2;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce7e5a8684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 identity=32458 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f20cc407-5dff-4d25-9370-2c3b60afcca2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=f20cc407-5dff-4d25-9370-2c3b60afcca2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.162 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-td687 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce7e5a8684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 identity=32458 ipv4=10.0.0.162 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-td687 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce7e5a8684 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=390 identity=32458 ipv4=10.0.0.162 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-td687 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce7e5a8684 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=390 identity=32458 ipv4=10.0.0.162 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-td687 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ce7e5a8684 endpointID=390 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-td687 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=f20cc407-5dff-4d25-9370-2c3b60afcca2 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=f20cc407-5dff-4d25-9370-2c3b60afcca2 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=ce7e5a8684 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=390 identity=32458 ipv4=10.0.0.162 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-td687 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=396085b3-9104-4ea2-b7cc-59e0406f9145] Description:}]" policyAddRequest=716baa00-ee0b-4182-a418-6a18ec835e77 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=716baa00-ee0b-4182-a418-6a18ec835e77 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=0d2024e6-e408-421c-886e-f227893c0ac0] Description:}]" policyAddRequest=da3a0b3c-ee7a-4107-be00-9cfb6ffe8269 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=da3a0b3c-ee7a-4107-be00-9cfb6ffe8269 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.139 aab4a8be-4307-484a-9821-366fb1dd7ea8 default }" containerID=bbc6d101753380a49fc0511df224e750d669eaac1c172adecf94a80c03a0ee28 datapathConfiguration="&{false false false false false }" interface=lxced143584dac3 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-567db labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bbc6d10175 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=809 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-567db subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bbc6d10175 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=809 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-567db subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=bbc6d10175 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=809 identity=35688 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-567db oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bbc6d10175 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=809 identity=35688 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-567db subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bbc6d10175 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=809 identity=35688 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-567db subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbc6d10175 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=809 identity=35688 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-567db subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.168 6a143769-3814-4a7c-8a25-ed3e77277369 default }" containerID=899f104d755bec87362e2cfaff66d72d198632e61fb447a025afdd18bb7927e2 datapathConfiguration="&{false false false false false }" interface=lxc013a4608cf70 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jpkkh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=899f104d75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3712 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jpkkh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=899f104d75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3712 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jpkkh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=899f104d75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3712 identity=40961 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jpkkh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=899f104d75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3712 identity=40961 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jpkkh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=899f104d75 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3712 identity=40961 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jpkkh subsys=endpoint level=info msg="Successful endpoint creation" containerID=899f104d75 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3712 identity=40961 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jpkkh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.209 96681ca4-c3c1-41b4-8caa-56d08d892933 default }" containerID=0e841eb54333471feb9ef7531b929eecbd0147429578e459fc7349f2686cdaf7 datapathConfiguration="&{false false false false false }" interface=lxc33a92e669156 k8sPodName=openstack/pxc-operator-69cb5bbdb9-qzg2r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e841eb543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3039 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-qzg2r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e841eb543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3039 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-qzg2r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e841eb543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3039 identity=281 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-qzg2r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e841eb543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3039 identity=281 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-qzg2r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0e841eb543 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3039 identity=281 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-qzg2r subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e841eb543 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3039 identity=281 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-qzg2r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.64 705644ef-4071-4934-8bb7-b1ca4d7f2fb5 default }" containerID=1cb262d7a904fe69b58cea359f16adee1b2b7337f6efefd6e7f44b3a736ad2fa datapathConfiguration="&{false false false false false }" interface=lxc263ff797ac1a k8sPodName=local-path-storage/helper-pod-create-pvc-fb2e01ce-bbfc-4caa-bb4c-bd994bb2e5f7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1cb262d7a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb2e01ce-bbfc-4caa-bb4c-bd994bb2e5f7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1cb262d7a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb2e01ce-bbfc-4caa-bb4c-bd994bb2e5f7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1cb262d7a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 identity=25904 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb2e01ce-bbfc-4caa-bb4c-bd994bb2e5f7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1cb262d7a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 identity=25904 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb2e01ce-bbfc-4caa-bb4c-bd994bb2e5f7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1cb262d7a9 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2751 identity=25904 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb2e01ce-bbfc-4caa-bb4c-bd994bb2e5f7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1cb262d7a9 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2751 identity=25904 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb2e01ce-bbfc-4caa-bb4c-bd994bb2e5f7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.189 ffd28526-3aaf-4df6-a710-21088861ae96 default }" containerID=94b54d081cd194ae638662c48effa2ea1600f15b27a24a0af6d100e9968e5ca2 datapathConfiguration="&{false false false false false }" interface=lxc9f9b0bb136a1 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94b54d081c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94b54d081c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94b54d081c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identity=15657 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94b54d081c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identity=15657 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94b54d081c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=832 identity=15657 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=94b54d081c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=832 identity=15657 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1cb262d7a9 endpointID=2751 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fb2e01ce-bbfc-4caa-bb4c-bd994bb2e5f7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1cb262d7a9 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2751 identity=25904 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb2e01ce-bbfc-4caa-bb4c-bd994bb2e5f7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 7c5144de-cccb-4403-91b7-90ef272a31d0 default }" containerID=42013878400388898fd57c5782d671fe02306d7177cca62593e67aea3d61529e datapathConfiguration="&{false false false false false }" interface=lxc1037634b2cf4 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4201387840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4201387840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4201387840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4201387840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identity=49329 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4201387840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identity=49329 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4201387840 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=670 identity=49329 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4201387840 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=670 identity=49329 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=611f4ece-e833-45e3-a55c-9757d66f6049] Description:}]" policyAddRequest=d138845f-85a0-443c-ba9f-f6c059abe118 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d138845f-85a0-443c-ba9f-f6c059abe118 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.141 563531b8-6b41-4780-80a5-80e4684bce57 default }" containerID=08e3414fceb0c2d62941816487e9a4bc6876cfba988481624efb0542aaa2a6a3 datapathConfiguration="&{false false false false false }" interface=lxc0f13c0e7cf79 k8sPodName=local-path-storage/helper-pod-create-pvc-1d7c96c7-75ca-4f92-ab9b-5edb1e03df4c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08e3414fce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1657 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d7c96c7-75ca-4f92-ab9b-5edb1e03df4c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08e3414fce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1657 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d7c96c7-75ca-4f92-ab9b-5edb1e03df4c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08e3414fce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1657 identity=25904 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d7c96c7-75ca-4f92-ab9b-5edb1e03df4c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08e3414fce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1657 identity=25904 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d7c96c7-75ca-4f92-ab9b-5edb1e03df4c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=08e3414fce datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1657 identity=25904 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d7c96c7-75ca-4f92-ab9b-5edb1e03df4c subsys=endpoint level=info msg="Successful endpoint creation" containerID=08e3414fce datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1657 identity=25904 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d7c96c7-75ca-4f92-ab9b-5edb1e03df4c subsys=daemon level=info msg="Delete endpoint request" containerID=08e3414fce endpointID=1657 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1d7c96c7-75ca-4f92-ab9b-5edb1e03df4c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=08e3414fce datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1657 identity=25904 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d7c96c7-75ca-4f92-ab9b-5edb1e03df4c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 da8acb89-a69b-4e52-9556-bb185436ece4 default }" containerID=012b50c767ecc20655343a17e548f38c9edb155164f49badc19a48a56149aaad datapathConfiguration="&{false false false false false }" interface=lxc570124aa9cad k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=012b50c767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=012b50c767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=012b50c767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identity=28062 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=012b50c767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identity=28062 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=012b50c767 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=81 identity=28062 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=012b50c767 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=81 identity=28062 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=b4cd24b8-ec2a-4af9-813a-8a229fb7a87b] Description:}]" policyAddRequest=19a1cc5d-c1f1-43c5-9ba9-d6753c4a65c9 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=19a1cc5d-c1f1-43c5-9ba9-d6753c4a65c9 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.33 2f5ac73f-87fa-4cab-8019-ba891d6d7b45 default }" containerID=8ed1cc9acf4760c74ef980df5710063d526a6dfd2706a3ba213e41f0b44fdb49 datapathConfiguration="&{false false false false false }" interface=lxcc60c282b5419 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ed1cc9acf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 ipv4=10.0.0.33 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ed1cc9acf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.33 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ed1cc9acf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identity=21744 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.33 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ed1cc9acf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identity=21744 ipv4=10.0.0.33 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ed1cc9acf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1743 identity=21744 ipv4=10.0.0.33 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ed1cc9acf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1743 identity=21744 ipv4=10.0.0.33 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008589554560580031 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.252 a077696d-4570-4413-a6b2-b4c5fffb6027 default }" containerID=fa5f2fad9e3995f7c966f21f5da1a3230b338638138eb26b5ae0b99b06719d9b datapathConfiguration="&{false false false false false }" interface=lxc45f23f3e013a k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zzqrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa5f2fad9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zzqrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa5f2fad9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zzqrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa5f2fad9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identity=10775 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zzqrj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa5f2fad9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identity=10775 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zzqrj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.98 96670ddf-2c95-47f4-bd9f-96dc940f321f default }" containerID=15948d37ec18dde2ee9864df4a3d72377cbbc20a6c75e47296a35a96fedf5b11 datapathConfiguration="&{false false false false false }" interface=lxca18dd2a82de7 k8sPodName=monitoring/node-feature-discovery-worker-cx6j4 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.30 fb465953-48f3-45fb-b606-559934b8c417 default }" containerID=6dd5a72515bb75c3f2c220e4bd8ebaa226f00e038d1ecbee4c89523269020821 datapathConfiguration="&{false false false false false }" interface=lxc12d6241b11bb k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-dk7hb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15948d37ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cx6j4 subsys=endpoint level=info msg="New endpoint" containerID=6dd5a72515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1796 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-dk7hb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6dd5a72515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1796 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-dk7hb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=15948d37ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cx6j4 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6dd5a72515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1796 identity=53885 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-dk7hb oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=6dd5a72515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1796 identity=53885 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-dk7hb subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15948d37ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identity=11160 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cx6j4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15948d37ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identity=11160 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cx6j4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa5f2fad9e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=251 identity=10775 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zzqrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa5f2fad9e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=251 identity=10775 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zzqrj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=15948d37ec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=976 identity=11160 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cx6j4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=15948d37ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=976 identity=11160 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cx6j4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6dd5a72515 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1796 identity=53885 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-dk7hb subsys=endpoint level=info msg="Successful endpoint creation" containerID=6dd5a72515 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1796 identity=53885 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-dk7hb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.246 d49b8075-8852-4300-ab3d-ee4286a74e74 default }" containerID=e8a2234352ba3df85d18c467ce1b651da8fe3533e26d1baef1c59a8109a6a3de datapathConfiguration="&{false false false false false }" interface=lxc245269550c59 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wr4hc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8a2234352 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4070 ipv4=10.0.0.246 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wr4hc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8a2234352 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4070 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.246 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wr4hc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8a2234352 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4070 identity=6945 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.246 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wr4hc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8a2234352 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4070 identity=6945 ipv4=10.0.0.246 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wr4hc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e8a2234352 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4070 identity=6945 ipv4=10.0.0.246 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wr4hc subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8a2234352 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4070 identity=6945 ipv4=10.0.0.246 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wr4hc subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3509 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03509 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03509 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03509 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03509:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3509 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 21e99dec-d51e-46eb-a33b-778d6aa36bd0 default }" containerID=b1e8f4507e1dcc91e248b98f1871940d3cb0d5634c9081e25a729c6487b88055 datapathConfiguration="&{false false false false false }" interface=lxc2166afc32744 k8sPodName=monitoring/kube-prometheus-stack-admission-create-ghmbr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1e8f4507e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ghmbr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b1e8f4507e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=756e27f4-ec4e-46e0-a1e3-c0e167618aa5,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=756e27f4-ec4e-46e0-a1e3-c0e167618aa5,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ghmbr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=756e27f4-ec4e-46e0-a1e3-c0e167618aa5;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=756e27f4-ec4e-46e0-a1e3-c0e167618aa5;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b1e8f4507e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 identity=8119 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=756e27f4-ec4e-46e0-a1e3-c0e167618aa5,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=756e27f4-ec4e-46e0-a1e3-c0e167618aa5,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ghmbr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b1e8f4507e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 identity=8119 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ghmbr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b1e8f4507e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=290 identity=8119 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ghmbr subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1e8f4507e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=290 identity=8119 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ghmbr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b1e8f4507e endpointID=290 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-ghmbr subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=756e27f4-ec4e-46e0-a1e3-c0e167618aa5 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=756e27f4-ec4e-46e0-a1e3-c0e167618aa5 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=b1e8f4507e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=290 identity=8119 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ghmbr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 853ddbbb-5625-4caf-8369-0eacdcc44c91 default }" containerID=b540310f55fd0ca161edf796d63ac5ee51ebbae8ef28d9a734e981600f2d6553 datapathConfiguration="&{false false false false false }" interface=lxc13f327ab2a66 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r6jmm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b540310f55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r6jmm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 f34ef28a-4789-4e4b-8968-91ccd52f6965 default }" containerID=5c8fd0a0f849269ac37d537037af544998704e31316617467a5895fc2c751b19 datapathConfiguration="&{false false false false false }" interface=lxc15d03e8e3350 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xwptp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c8fd0a0f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=952 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xwptp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b540310f55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r6jmm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=5c8fd0a0f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=952 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xwptp subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b540310f55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identity=55977 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r6jmm oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=b540310f55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identity=55977 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r6jmm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5c8fd0a0f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=952 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xwptp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c8fd0a0f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=952 identity=45771 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xwptp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c8fd0a0f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=952 identity=45771 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xwptp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 a1369cac-8a47-45e5-9112-758822555636 default }" containerID=3f7dca5be2bf78b46bea64a0724729a3b0ea3c643d841bb2da7c22b47c95132f datapathConfiguration="&{false false false false false }" interface=lxc090b142bdaa0 k8sPodName=monitoring/kube-prometheus-stack-grafana-dbdf5c4c6-zlvlj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f7dca5be2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-dbdf5c4c6-zlvlj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f7dca5be2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-dbdf5c4c6-zlvlj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f7dca5be2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identity=24653 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-dbdf5c4c6-zlvlj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f7dca5be2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identity=24653 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-dbdf5c4c6-zlvlj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c8fd0a0f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=952 identity=45771 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xwptp subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c8fd0a0f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=952 identity=45771 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xwptp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b540310f55 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=263 identity=55977 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r6jmm subsys=endpoint level=info msg="Successful endpoint creation" containerID=b540310f55 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=263 identity=55977 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r6jmm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3f7dca5be2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=438 identity=24653 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-dbdf5c4c6-zlvlj subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f7dca5be2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=438 identity=24653 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-dbdf5c4c6-zlvlj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.79 cc085afa-055d-4842-acfa-f185089be015 default }" containerID=c9ecc41fb42fa1f9a9c9012e8caaf5fddafe54bb442865cbcb5423d7a20265cc datapathConfiguration="&{false false false false false }" interface=lxc587a643eb5b8 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rjd8q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9ecc41fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2678 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rjd8q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9ecc41fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2678 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=0bd16c97-53d8-4f5c-bda9-9f89596aaa6c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=0bd16c97-53d8-4f5c-bda9-9f89596aaa6c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rjd8q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=0bd16c97-53d8-4f5c-bda9-9f89596aaa6c;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=0bd16c97-53d8-4f5c-bda9-9f89596aaa6c;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9ecc41fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2678 identity=6861 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=0bd16c97-53d8-4f5c-bda9-9f89596aaa6c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=0bd16c97-53d8-4f5c-bda9-9f89596aaa6c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rjd8q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9ecc41fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2678 identity=6861 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rjd8q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9ecc41fb4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2678 identity=6861 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rjd8q subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9ecc41fb4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2678 identity=6861 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rjd8q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c9ecc41fb4 endpointID=2678 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-rjd8q subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=0bd16c97-53d8-4f5c-bda9-9f89596aaa6c k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=0bd16c97-53d8-4f5c-bda9-9f89596aaa6c k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=c9ecc41fb4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2678 identity=6861 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rjd8q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 cef19304-987f-4be9-9055-8b96b94264f2 default }" containerID=dfd6f89d6c851918fa312bec51a2e81b5a04a93271562d2f3a03a2da7f90ea14 datapathConfiguration="&{false false false false false }" interface=lxc184537ebf609 k8sPodName=local-path-storage/helper-pod-create-pvc-e0df3b6c-bd1c-45b8-9ec8-59b46d3540ca labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dfd6f89d6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3626 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0df3b6c-bd1c-45b8-9ec8-59b46d3540ca subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dfd6f89d6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3626 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0df3b6c-bd1c-45b8-9ec8-59b46d3540ca subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dfd6f89d6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3626 identity=25904 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0df3b6c-bd1c-45b8-9ec8-59b46d3540ca oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dfd6f89d6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3626 identity=25904 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0df3b6c-bd1c-45b8-9ec8-59b46d3540ca subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dfd6f89d6c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3626 identity=25904 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0df3b6c-bd1c-45b8-9ec8-59b46d3540ca subsys=endpoint level=info msg="Successful endpoint creation" containerID=dfd6f89d6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3626 identity=25904 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0df3b6c-bd1c-45b8-9ec8-59b46d3540ca subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.48 61b483f6-6172-4d0b-bf4f-2d149aac7df8 default }" containerID=4d80f954d396ee3c579e358b5a26e348fcb8126443d18a842e186f8cac9961cb datapathConfiguration="&{false false false false false }" interface=lxc1355f754dd2a k8sPodName=local-path-storage/helper-pod-create-pvc-059c53b7-22b6-4b54-a8d1-7dc8f98a7548 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d80f954d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-059c53b7-22b6-4b54-a8d1-7dc8f98a7548 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d80f954d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-059c53b7-22b6-4b54-a8d1-7dc8f98a7548 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4d80f954d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identity=25904 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-059c53b7-22b6-4b54-a8d1-7dc8f98a7548 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d80f954d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identity=25904 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-059c53b7-22b6-4b54-a8d1-7dc8f98a7548 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d80f954d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=676 identity=25904 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-059c53b7-22b6-4b54-a8d1-7dc8f98a7548 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d80f954d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=676 identity=25904 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-059c53b7-22b6-4b54-a8d1-7dc8f98a7548 subsys=daemon level=info msg="Delete endpoint request" containerID=dfd6f89d6c endpointID=3626 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e0df3b6c-bd1c-45b8-9ec8-59b46d3540ca subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=4d80f954d3 endpointID=676 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-059c53b7-22b6-4b54-a8d1-7dc8f98a7548 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=dfd6f89d6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3626 identity=25904 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0df3b6c-bd1c-45b8-9ec8-59b46d3540ca subsys=endpoint level=info msg="Removed endpoint" containerID=4d80f954d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=676 identity=25904 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-059c53b7-22b6-4b54-a8d1-7dc8f98a7548 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 4ef6f968-42f9-4398-babc-9253bb2f0fc6 default }" containerID=92c6aad8c108e1c6f11e4bcdded554e8060c6aa55a0e5f9381a714f9f593fa6b datapathConfiguration="&{false false false false false }" interface=lxc64c4dc90289a k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92c6aad8c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92c6aad8c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92c6aad8c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identity=46301 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=92c6aad8c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identity=46301 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=92c6aad8c1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=900 identity=46301 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=92c6aad8c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=900 identity=46301 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.166 a0fdefbe-bc3e-4df8-9cd3-92602273f938 default }" containerID=b856a97e1576045eb487a47150a4451c4dd8aad73f340985bf94ecb74c944e13 datapathConfiguration="&{false false false false false }" interface=lxc185c897f0428 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b856a97e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b856a97e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b856a97e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identity=64077 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b856a97e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identity=64077 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b856a97e15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2147 identity=64077 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b856a97e15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2147 identity=64077 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.115 a7293d29-a51e-4d87-af95-1202c740d911 default }" containerID=f1975baf35886899dac40219e61f21f80df332358d53a5e17d0adf5b705352cc datapathConfiguration="&{false false false false false }" interface=lxcfa091bfeb2f6 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1975baf35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1975baf35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1975baf35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identity=33227 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1975baf35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identity=33227 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 07bf54dc-6ad4-4e7b-93f6-2b5515af6cc0 default }" containerID=e64cbc0ff8c3f262823c201782b79a613834620531e9cd9d063e611aab286d5a datapathConfiguration="&{false false false false false }" interface=lxcd56f274a90ee k8sPodName=monitoring/loki-gateway-cf54cb88c-w9842 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e64cbc0ff8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-w9842 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e64cbc0ff8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-w9842 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e64cbc0ff8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=3646 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-w9842 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e64cbc0ff8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=3646 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-w9842 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 598cb98a-fbcd-454b-ab22-56df2f437ad0 default }" containerID=1739cc94a93306bdc930054c9c65349b31c2636b64c43c4687fdb9a630c669d9 datapathConfiguration="&{false false false false false }" interface=lxc28afa64ed5eb k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1739cc94a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1739cc94a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=f1975baf35 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=316 identity=33227 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1975baf35 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=316 identity=33227 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e64cbc0ff8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=859 identity=3646 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-w9842 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e64cbc0ff8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=859 identity=3646 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-w9842 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1739cc94a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1739cc94a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 identity=15345 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1739cc94a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 identity=15345 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1739cc94a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2931 identity=15345 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1739cc94a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2931 identity=15345 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.35 dd134367-2f38-48ff-8dfa-3a3b73f6caa8 default }" containerID=8c6029e2e85a7d5baaef16ef284b8bd135ddca133311b8b527be78262a066be1 datapathConfiguration="&{false false false false false }" interface=lxca586e6197def k8sPodName=local-path-storage/helper-pod-create-pvc-8c5bdefe-c1c8-4ce1-a0c3-de133266a02e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c6029e2e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8c5bdefe-c1c8-4ce1-a0c3-de133266a02e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c6029e2e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8c5bdefe-c1c8-4ce1-a0c3-de133266a02e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c6029e2e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 identity=25904 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8c5bdefe-c1c8-4ce1-a0c3-de133266a02e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c6029e2e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 identity=25904 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8c5bdefe-c1c8-4ce1-a0c3-de133266a02e subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8c6029e2e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1136 identity=25904 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8c5bdefe-c1c8-4ce1-a0c3-de133266a02e subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c6029e2e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1136 identity=25904 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8c5bdefe-c1c8-4ce1-a0c3-de133266a02e subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.224 e1adff8f-d22c-439a-b8ce-e5254e9c5f62 default }" containerID=e05d82a3260503e1fa9286abd83c5bf41bc91145e1c9e6e7a74c4d105e140a34 datapathConfiguration="&{false false false false false }" interface=lxca3a7eb383e22 k8sPodName=monitoring/vector-9spx7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e05d82a326 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/vector-9spx7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e05d82a326 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/vector-9spx7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e05d82a326 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identity=59307 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/vector-9spx7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e05d82a326 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identity=59307 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/vector-9spx7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e05d82a326 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1574 identity=59307 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/vector-9spx7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e05d82a326 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1574 identity=59307 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/vector-9spx7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8c6029e2e8 endpointID=1136 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8c5bdefe-c1c8-4ce1-a0c3-de133266a02e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8c6029e2e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1136 identity=25904 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8c5bdefe-c1c8-4ce1-a0c3-de133266a02e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 1835d9a8-3698-4c9e-9774-153a738dd5aa default }" containerID=1d0ed3bea38876be5f9b3cce30859bfdb4349e342bc0064b433252b4e61e3193 datapathConfiguration="&{false false false false false }" interface=lxcef22c28c0f2e k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d0ed3bea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d0ed3bea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1d0ed3bea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d0ed3bea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 identity=22707 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d0ed3bea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 identity=22707 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d0ed3bea3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1185 identity=22707 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d0ed3bea3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1185 identity=22707 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.129 36099125-0092-4922-8f9a-c7b21608efe9 default }" containerID=e2a6cb35752da0553c1749ad2ae4eeab52a7f7a383a2e56beab8d47c9d489805 datapathConfiguration="&{false false false false false }" interface=lxcaa8dc5dea488 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gn95t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2a6cb3575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gn95t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2a6cb3575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gn95t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2a6cb3575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 identity=20945 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gn95t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2a6cb3575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 identity=20945 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gn95t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e2a6cb3575 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3156 identity=20945 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gn95t subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2a6cb3575 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3156 identity=20945 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gn95t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.190 1a298aff-27bc-409f-9301-2b0cc700747c default }" containerID=5cee17a867586899ad59891ea212ee72340fc18a58c60a8db9ea56535fcd6acf datapathConfiguration="&{false false false false false }" interface=lxceb15127d60a5 k8sPodName=openstack/memcached-memcached-6479589586-9hwmt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5cee17a867 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=864 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-9hwmt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5cee17a867 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=864 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-9hwmt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5cee17a867 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=864 identity=12698 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-9hwmt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5cee17a867 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=864 identity=12698 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-9hwmt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5cee17a867 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=864 identity=12698 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-9hwmt subsys=endpoint level=info msg="Successful endpoint creation" containerID=5cee17a867 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=864 identity=12698 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-9hwmt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.102 19746431-7146-487e-82c1-fef2481bda9d default }" containerID=2a146205d187592bfc5c8b14b37bcc0045598fbaa10f8f30c4ae9e0bf34c81f2 datapathConfiguration="&{false false false false false }" interface=lxceff53a7e0621 k8sPodName=local-path-storage/helper-pod-create-pvc-a418e104-fe45-4151-9742-fa5bd454e105 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a146205d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a418e104-fe45-4151-9742-fa5bd454e105 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a146205d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a418e104-fe45-4151-9742-fa5bd454e105 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a146205d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 identity=25904 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a418e104-fe45-4151-9742-fa5bd454e105 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a146205d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 identity=25904 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a418e104-fe45-4151-9742-fa5bd454e105 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a146205d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2560 identity=25904 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a418e104-fe45-4151-9742-fa5bd454e105 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a146205d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2560 identity=25904 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a418e104-fe45-4151-9742-fa5bd454e105 subsys=daemon level=info msg="Delete endpoint request" containerID=2a146205d1 endpointID=2560 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a418e104-fe45-4151-9742-fa5bd454e105 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2a146205d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2560 identity=25904 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a418e104-fe45-4151-9742-fa5bd454e105 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 9e3d6a49-de52-46d0-8408-b7cb3b1f3a1a default }" containerID=d2bc23dfe2cbb6ce1868348582e24e1e62f2a9800929332fa70c303a7a2c96eb datapathConfiguration="&{false false false false false }" interface=lxc0407f84ec9b5 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2bc23dfe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2315 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2bc23dfe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2315 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2bc23dfe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2315 identity=6731 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d2bc23dfe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2315 identity=6731 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2bc23dfe2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2315 identity=6731 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2bc23dfe2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2315 identity=6731 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.34 d919c451-1f48-4c96-8463-4d3c61fc93a0 default }" containerID=43077dfc45b184778e545dd556c0884ecb66558bf82147100da0bbece3b95a61 datapathConfiguration="&{false false false false false }" interface=lxcabf7925859ce k8sPodName=openstack/keystone-api-66b64957b-8kzvm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43077dfc45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1115 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-api-66b64957b-8kzvm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43077dfc45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1115 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-api-66b64957b-8kzvm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43077dfc45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1115 identity=3787 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-api-66b64957b-8kzvm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43077dfc45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1115 identity=3787 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-api-66b64957b-8kzvm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.84 c8904159-8c2a-4dec-8b25-2145756f64c9 default }" containerID=f7b457eecdcf4d3a9a382cdc253746a25300d131b522b5afd313d3e924eeb324 datapathConfiguration="&{false false false false false }" interface=lxcd99bcfeccf29 k8sPodName=openstack/keystone-credential-setup-b4kds labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7b457eecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-b4kds subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7b457eecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bf758bc0-6c8a-40f0-aec8-b7c2b0be9558,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=bf758bc0-6c8a-40f0-aec8-b7c2b0be9558,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-b4kds subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bf758bc0-6c8a-40f0-aec8-b7c2b0be9558;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=bf758bc0-6c8a-40f0-aec8-b7c2b0be9558;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7b457eecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identity=298 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bf758bc0-6c8a-40f0-aec8-b7c2b0be9558,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=bf758bc0-6c8a-40f0-aec8-b7c2b0be9558,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-b4kds oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7b457eecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identity=298 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-b4kds subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=43077dfc45 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1115 identity=3787 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-api-66b64957b-8kzvm subsys=endpoint level=info msg="Successful endpoint creation" containerID=43077dfc45 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1115 identity=3787 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-api-66b64957b-8kzvm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f7b457eecd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=980 identity=298 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-b4kds subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7b457eecd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=980 identity=298 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-b4kds subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f7b457eecd endpointID=980 k8sNamespace=openstack k8sPodName=keystone-credential-setup-b4kds subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bf758bc0-6c8a-40f0-aec8-b7c2b0be9558 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=bf758bc0-6c8a-40f0-aec8-b7c2b0be9558 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f7b457eecd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=980 identity=298 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-credential-setup-b4kds subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 06fa67dc-a906-4ba4-9f7c-3619daa97f36 default }" containerID=d90cf6c3848e41776e1352e2fe00bc58ef85933f6104ecc8116eeba8d241912b datapathConfiguration="&{false false false false false }" interface=lxc721919dad63e k8sPodName=openstack/keystone-db-init-srdjf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d90cf6c384 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-init-srdjf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d90cf6c384 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3bf4be46-cfea-45ba-94f3-2885abb2f65e,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=3bf4be46-cfea-45ba-94f3-2885abb2f65e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-init-srdjf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3bf4be46-cfea-45ba-94f3-2885abb2f65e;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=3bf4be46-cfea-45ba-94f3-2885abb2f65e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d90cf6c384 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identity=16440 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3bf4be46-cfea-45ba-94f3-2885abb2f65e,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=3bf4be46-cfea-45ba-94f3-2885abb2f65e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-init-srdjf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d90cf6c384 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identity=16440 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-init-srdjf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d90cf6c384 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=183 identity=16440 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-init-srdjf subsys=endpoint level=info msg="Successful endpoint creation" containerID=d90cf6c384 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=183 identity=16440 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-init-srdjf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d90cf6c384 endpointID=183 k8sNamespace=openstack k8sPodName=keystone-db-init-srdjf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3bf4be46-cfea-45ba-94f3-2885abb2f65e k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=3bf4be46-cfea-45ba-94f3-2885abb2f65e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d90cf6c384 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=183 identity=16440 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-init-srdjf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 d1f0b7ac-1792-4040-bcb3-43038a308f9b default }" containerID=8116e9f8ed86c7910dd28916493146187b36e14016c59d61906e0624b4551929 datapathConfiguration="&{false false false false false }" interface=lxc53b56d1ffca1 k8sPodName=openstack/keystone-fernet-setup-vkkbs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8116e9f8ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-fernet-setup-vkkbs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8116e9f8ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f975cb27-1a9b-4523-a981-a6727270bccd,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=f975cb27-1a9b-4523-a981-a6727270bccd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-fernet-setup-vkkbs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f975cb27-1a9b-4523-a981-a6727270bccd;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=f975cb27-1a9b-4523-a981-a6727270bccd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8116e9f8ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 identity=4767 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f975cb27-1a9b-4523-a981-a6727270bccd,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=f975cb27-1a9b-4523-a981-a6727270bccd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-fernet-setup-vkkbs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8116e9f8ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 identity=4767 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-fernet-setup-vkkbs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8116e9f8ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=399 identity=4767 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-fernet-setup-vkkbs subsys=endpoint level=info msg="Successful endpoint creation" containerID=8116e9f8ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=399 identity=4767 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-fernet-setup-vkkbs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8116e9f8ed endpointID=399 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-vkkbs subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f975cb27-1a9b-4523-a981-a6727270bccd k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=f975cb27-1a9b-4523-a981-a6727270bccd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8116e9f8ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=399 identity=4767 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-fernet-setup-vkkbs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 25d0c699-f909-48c2-a949-8c5a7541a008 default }" containerID=e9b8597d1bc1421a6b78dba302fd6f701bd0e7913adc8bfeee4315b851e719b7 datapathConfiguration="&{false false false false false }" interface=lxcbe2ffd25b820 k8sPodName=openstack/keystone-db-sync-fk8tm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9b8597d1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-db-sync-fk8tm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9b8597d1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=75e1c064-7117-4b3f-9f4c-5c38ae563941,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=75e1c064-7117-4b3f-9f4c-5c38ae563941,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-db-sync-fk8tm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=75e1c064-7117-4b3f-9f4c-5c38ae563941;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=75e1c064-7117-4b3f-9f4c-5c38ae563941;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9b8597d1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 identity=14066 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=75e1c064-7117-4b3f-9f4c-5c38ae563941,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=75e1c064-7117-4b3f-9f4c-5c38ae563941,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-db-sync-fk8tm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9b8597d1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2301 identity=14066 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-db-sync-fk8tm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9b8597d1b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2301 identity=14066 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-db-sync-fk8tm subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9b8597d1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2301 identity=14066 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-db-sync-fk8tm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e9b8597d1b endpointID=2301 k8sNamespace=openstack k8sPodName=keystone-db-sync-fk8tm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=75e1c064-7117-4b3f-9f4c-5c38ae563941 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=75e1c064-7117-4b3f-9f4c-5c38ae563941 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e9b8597d1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2301 identity=14066 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-db-sync-fk8tm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 7bd9781e-66d1-4a81-ac48-2eeb1c56a4fd default }" containerID=174c942f886f16e3935752e2eb4eba7f0c2b256c72b64fa217d80fdd8ab0e0dc datapathConfiguration="&{false false false false false }" interface=lxca47b6eb2f3c4 k8sPodName=openstack/keystone-rabbit-init-f769g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=174c942f88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3587 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-f769g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=174c942f88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3587 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a42ab955-f172-4f65-96ec-b92dd2803dcf,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a42ab955-f172-4f65-96ec-b92dd2803dcf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-f769g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a42ab955-f172-4f65-96ec-b92dd2803dcf;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a42ab955-f172-4f65-96ec-b92dd2803dcf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=174c942f88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3587 identity=42621 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a42ab955-f172-4f65-96ec-b92dd2803dcf,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a42ab955-f172-4f65-96ec-b92dd2803dcf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-f769g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=174c942f88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3587 identity=42621 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-f769g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=174c942f88 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3587 identity=42621 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-f769g subsys=endpoint level=info msg="Successful endpoint creation" containerID=174c942f88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3587 identity=42621 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-f769g subsys=daemon level=info msg="Delete endpoint request" containerID=174c942f88 endpointID=3587 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-f769g subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a42ab955-f172-4f65-96ec-b92dd2803dcf k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a42ab955-f172-4f65-96ec-b92dd2803dcf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=174c942f88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3587 identity=42621 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-rabbit-init-f769g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 908e4854-30b2-4b8d-ace1-4efa127657a1 default }" containerID=6f1816b5aac8a73e558aab8b0bde5bb732c1adfd71f4065f2d61037806e7b368 datapathConfiguration="&{false false false false false }" interface=lxcdc058cc59d67 k8sPodName=openstack/keystone-domain-manage-nxtvj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f1816b5aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/keystone-domain-manage-nxtvj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f1816b5aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2894b2ea-d88f-41ab-958d-251e77896bd9,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=2894b2ea-d88f-41ab-958d-251e77896bd9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/keystone-domain-manage-nxtvj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2894b2ea-d88f-41ab-958d-251e77896bd9;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=2894b2ea-d88f-41ab-958d-251e77896bd9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f1816b5aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identity=57835 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2894b2ea-d88f-41ab-958d-251e77896bd9,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=2894b2ea-d88f-41ab-958d-251e77896bd9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/keystone-domain-manage-nxtvj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6f1816b5aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identity=57835 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/keystone-domain-manage-nxtvj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6f1816b5aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=480 identity=57835 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/keystone-domain-manage-nxtvj subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f1816b5aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=480 identity=57835 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/keystone-domain-manage-nxtvj subsys=daemon level=info msg="Delete endpoint request" containerID=6f1816b5aa endpointID=480 k8sNamespace=openstack k8sPodName=keystone-domain-manage-nxtvj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2894b2ea-d88f-41ab-958d-251e77896bd9 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=2894b2ea-d88f-41ab-958d-251e77896bd9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6f1816b5aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=480 identity=57835 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/keystone-domain-manage-nxtvj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 7342db9a-6178-4422-a6e2-8ac36769af1b default }" containerID=15b4c2c0f8fbce1dcd2942bea2038c8b1e2f341500b0ab3d78afe991ba58a210 datapathConfiguration="&{false false false false false }" interface=lxc332e1da55768 k8sPodName=openstack/keystone-bootstrap-v4zft labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15b4c2c0f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3120 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-v4zft subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15b4c2c0f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3120 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f92ae45d-f5a7-4c29-85a7-e4e1d06cf409,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f92ae45d-f5a7-4c29-85a7-e4e1d06cf409,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-v4zft subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f92ae45d-f5a7-4c29-85a7-e4e1d06cf409;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=f92ae45d-f5a7-4c29-85a7-e4e1d06cf409;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15b4c2c0f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3120 identity=22978 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f92ae45d-f5a7-4c29-85a7-e4e1d06cf409,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f92ae45d-f5a7-4c29-85a7-e4e1d06cf409,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-v4zft oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15b4c2c0f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3120 identity=22978 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-v4zft subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15b4c2c0f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3120 identity=22978 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-v4zft subsys=endpoint level=info msg="Successful endpoint creation" containerID=15b4c2c0f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3120 identity=22978 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-v4zft subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=15b4c2c0f8 endpointID=3120 k8sNamespace=openstack k8sPodName=keystone-bootstrap-v4zft subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f92ae45d-f5a7-4c29-85a7-e4e1d06cf409 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=f92ae45d-f5a7-4c29-85a7-e4e1d06cf409 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=15b4c2c0f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3120 identity=22978 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-v4zft subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 33f19b46-05f2-4bd6-b338-d0f8dbd329c3 default }" containerID=a3793bee42ca12161295aff3176aae90c41e0b469a81d09a871c43c4b1691b44 datapathConfiguration="&{false false false false false }" interface=lxcfb075eacb498 k8sPodName=local-path-storage/helper-pod-create-pvc-3acfbb19-94f9-44b9-9d78-556a790d2d69 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3793bee42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3acfbb19-94f9-44b9-9d78-556a790d2d69 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3793bee42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3acfbb19-94f9-44b9-9d78-556a790d2d69 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a3793bee42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identity=25904 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3acfbb19-94f9-44b9-9d78-556a790d2d69 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3793bee42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identity=25904 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3acfbb19-94f9-44b9-9d78-556a790d2d69 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a3793bee42 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=6 identity=25904 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3acfbb19-94f9-44b9-9d78-556a790d2d69 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3793bee42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=6 identity=25904 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3acfbb19-94f9-44b9-9d78-556a790d2d69 subsys=daemon level=info msg="Delete endpoint request" containerID=a3793bee42 endpointID=6 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3acfbb19-94f9-44b9-9d78-556a790d2d69 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a3793bee42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=6 identity=25904 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3acfbb19-94f9-44b9-9d78-556a790d2d69 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 47bf0731-18ce-4cd1-8f86-9bd259713f0a default }" containerID=5afc29ef1305741de97a4d6ca2c3ddeb4e8fd249a868ce229dd736aea6a0fdde datapathConfiguration="&{false false false false false }" interface=lxc98120e0759ad k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5afc29ef13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5afc29ef13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5afc29ef13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 identity=53831 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5afc29ef13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 identity=53831 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5afc29ef13 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1073 identity=53831 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5afc29ef13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1073 identity=53831 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03501765254913631 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.177 4361a870-09a7-4579-b4af-486c264eca33 default }" containerID=4344466c58a31cad442a672af5a03b1ea9060b0cf9d2f8dbbd4f0094a4e74d7c datapathConfiguration="&{false false false false false }" interface=lxca2d49bbed4ce k8sPodName=openstack/barbican-api-76464fd9bb-kcs8j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4344466c58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-api-76464fd9bb-kcs8j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4344466c58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-api-76464fd9bb-kcs8j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4344466c58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=976 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-api-76464fd9bb-kcs8j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4344466c58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=976 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-api-76464fd9bb-kcs8j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4344466c58 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=31 identity=976 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-api-76464fd9bb-kcs8j subsys=endpoint level=info msg="Successful endpoint creation" containerID=4344466c58 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=31 identity=976 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-api-76464fd9bb-kcs8j subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.138 2516f469-d77b-4c3f-81c4-722772679c93 default }" containerID=85f8aa9f8e31c2b33886d87ec1fb0abf720975ac517250843d768ec17232294c datapathConfiguration="&{false false false false false }" interface=lxcb804d9c21cf6 k8sPodName=openstack/barbican-db-init-rjnrt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85f8aa9f8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2430 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-rjnrt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85f8aa9f8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2430 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e5a883df-093c-4d98-b17e-5de0078432bd,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=e5a883df-093c-4d98-b17e-5de0078432bd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-rjnrt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e5a883df-093c-4d98-b17e-5de0078432bd;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=e5a883df-093c-4d98-b17e-5de0078432bd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85f8aa9f8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2430 identity=27361 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e5a883df-093c-4d98-b17e-5de0078432bd,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=e5a883df-093c-4d98-b17e-5de0078432bd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-rjnrt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85f8aa9f8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2430 identity=27361 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-rjnrt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85f8aa9f8e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2430 identity=27361 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-rjnrt subsys=endpoint level=info msg="Successful endpoint creation" containerID=85f8aa9f8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2430 identity=27361 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-rjnrt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=85f8aa9f8e endpointID=2430 k8sNamespace=openstack k8sPodName=barbican-db-init-rjnrt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e5a883df-093c-4d98-b17e-5de0078432bd k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=e5a883df-093c-4d98-b17e-5de0078432bd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=85f8aa9f8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2430 identity=27361 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/barbican-db-init-rjnrt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 9a107ba4-6f01-4aac-b5b5-fd18d90a2df9 default }" containerID=7205ce750d4f3db002fb22a634625b23a92825c643ba1e718fc13dc72103c1f2 datapathConfiguration="&{false false false false false }" interface=lxc64cc49ef71ab k8sPodName=openstack/barbican-db-sync-p4snv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7205ce750d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2798 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-sync-p4snv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7205ce750d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2798 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=acc3b61d-7af0-420a-8f8b-686d1cbf31ce,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=acc3b61d-7af0-420a-8f8b-686d1cbf31ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-sync-p4snv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=acc3b61d-7af0-420a-8f8b-686d1cbf31ce;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=acc3b61d-7af0-420a-8f8b-686d1cbf31ce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7205ce750d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2798 identity=50899 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=acc3b61d-7af0-420a-8f8b-686d1cbf31ce,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=acc3b61d-7af0-420a-8f8b-686d1cbf31ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-sync-p4snv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7205ce750d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2798 identity=50899 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-sync-p4snv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7205ce750d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2798 identity=50899 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-sync-p4snv subsys=endpoint level=info msg="Successful endpoint creation" containerID=7205ce750d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2798 identity=50899 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-sync-p4snv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7205ce750d endpointID=2798 k8sNamespace=openstack k8sPodName=barbican-db-sync-p4snv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=acc3b61d-7af0-420a-8f8b-686d1cbf31ce k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=acc3b61d-7af0-420a-8f8b-686d1cbf31ce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7205ce750d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2798 identity=50899 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-sync-p4snv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 d35cf8f3-3574-4669-89cf-4a0855b912ff default }" containerID=63333544b07e28dc5671b383e80a29de4bf007bafa494197805dcb71e5031e29 datapathConfiguration="&{false false false false false }" interface=lxc6b0c2381ec3c k8sPodName=openstack/barbican-rabbit-init-vsvht labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63333544b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-rabbit-init-vsvht subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63333544b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=006f83c4-99ea-433d-ba27-af661d4f61a0,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=006f83c4-99ea-433d-ba27-af661d4f61a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-rabbit-init-vsvht subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=006f83c4-99ea-433d-ba27-af661d4f61a0;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=006f83c4-99ea-433d-ba27-af661d4f61a0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=63333544b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-rabbit-init-vsvht line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=63333544b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 identity=867 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=006f83c4-99ea-433d-ba27-af661d4f61a0,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=006f83c4-99ea-433d-ba27-af661d4f61a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-rabbit-init-vsvht oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63333544b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 identity=867 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-rabbit-init-vsvht subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63333544b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2000 identity=867 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-rabbit-init-vsvht subsys=endpoint level=info msg="Successful endpoint creation" containerID=63333544b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2000 identity=867 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-rabbit-init-vsvht subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=63333544b0 endpointID=2000 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-vsvht subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=006f83c4-99ea-433d-ba27-af661d4f61a0 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=006f83c4-99ea-433d-ba27-af661d4f61a0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=63333544b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2000 identity=867 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/barbican-rabbit-init-vsvht subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 6183d34c-adf0-4f13-af30-a49920296e7a default }" containerID=97109cae38fdb821718aed95d720966b55da5ff6f43ea8c112f10b382b6fcc5d datapathConfiguration="&{false false false false false }" interface=lxc8d3231033f6b k8sPodName=openstack/barbican-ks-service-vllr6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97109cae38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3793 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-service-vllr6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97109cae38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3793 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=058eee14-caa9-4bc8-951b-55dc69818523,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=058eee14-caa9-4bc8-951b-55dc69818523,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-service-vllr6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=058eee14-caa9-4bc8-951b-55dc69818523;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=058eee14-caa9-4bc8-951b-55dc69818523;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97109cae38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3793 identity=38264 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=058eee14-caa9-4bc8-951b-55dc69818523,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=058eee14-caa9-4bc8-951b-55dc69818523,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-service-vllr6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=97109cae38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3793 identity=38264 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-service-vllr6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=97109cae38 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3793 identity=38264 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-service-vllr6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=97109cae38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3793 identity=38264 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-service-vllr6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=97109cae38 endpointID=3793 k8sNamespace=openstack k8sPodName=barbican-ks-service-vllr6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=058eee14-caa9-4bc8-951b-55dc69818523 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=058eee14-caa9-4bc8-951b-55dc69818523 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=97109cae38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3793 identity=38264 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-service-vllr6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 f6aa5d72-da9f-4beb-b839-0191ef6fbb10 default }" containerID=ea8fa4dfdb566ed5e4eb861f5c39612963ec6b9b2ec4baa2d6718c3439da7382 datapathConfiguration="&{false false false false false }" interface=lxc704992a4db3a k8sPodName=openstack/barbican-ks-endpoints-89pwq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea8fa4dfdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=240 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-ks-endpoints-89pwq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea8fa4dfdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=240 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=596eeb61-fc66-4de8-92c7-7302e47fbfd1,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=596eeb61-fc66-4de8-92c7-7302e47fbfd1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-ks-endpoints-89pwq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=596eeb61-fc66-4de8-92c7-7302e47fbfd1;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=596eeb61-fc66-4de8-92c7-7302e47fbfd1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ea8fa4dfdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=240 identity=12289 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=596eeb61-fc66-4de8-92c7-7302e47fbfd1,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=596eeb61-fc66-4de8-92c7-7302e47fbfd1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-ks-endpoints-89pwq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea8fa4dfdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=240 identity=12289 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-ks-endpoints-89pwq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea8fa4dfdb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=240 identity=12289 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-ks-endpoints-89pwq subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea8fa4dfdb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=240 identity=12289 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-ks-endpoints-89pwq subsys=daemon level=info msg="Delete endpoint request" containerID=ea8fa4dfdb endpointID=240 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-89pwq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=596eeb61-fc66-4de8-92c7-7302e47fbfd1 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=596eeb61-fc66-4de8-92c7-7302e47fbfd1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ea8fa4dfdb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=240 identity=12289 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-ks-endpoints-89pwq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 02a8e584-f6e0-4238-b2c1-0039ad9ce8c5 default }" containerID=8a24800ea80140fcae33092d3a07fdf8bf29971a148cc3c873ead702ad4b871b datapathConfiguration="&{false false false false false }" interface=lxc0682c154f93a k8sPodName=openstack/barbican-ks-user-nj8nk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a24800ea8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3744 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-nj8nk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a24800ea8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3744 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1dd10666-3e2d-49a1-98c0-3ead9429344a,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=1dd10666-3e2d-49a1-98c0-3ead9429344a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-nj8nk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1dd10666-3e2d-49a1-98c0-3ead9429344a;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=1dd10666-3e2d-49a1-98c0-3ead9429344a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8a24800ea8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3744 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-nj8nk line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8a24800ea8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3744 identity=50507 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1dd10666-3e2d-49a1-98c0-3ead9429344a,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=1dd10666-3e2d-49a1-98c0-3ead9429344a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-nj8nk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a24800ea8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3744 identity=50507 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-nj8nk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a24800ea8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3744 identity=50507 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-nj8nk subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a24800ea8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3744 identity=50507 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-nj8nk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8a24800ea8 endpointID=3744 k8sNamespace=openstack k8sPodName=barbican-ks-user-nj8nk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1dd10666-3e2d-49a1-98c0-3ead9429344a k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=1dd10666-3e2d-49a1-98c0-3ead9429344a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8a24800ea8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3744 identity=50507 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-nj8nk subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.18 5580d35e-05ff-47cf-b28e-c0017bb62daa default }" containerID=2634766a4a25acfef9908401e0aeb47797dd9b9d99031cfbc15d3d6ad993a94f datapathConfiguration="&{false false false false false }" interface=lxcc885e0a6e6b1 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6l6vk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2634766a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 ipv4=10.0.0.18 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6l6vk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2634766a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.18 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6l6vk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=2634766a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.18 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6l6vk line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2634766a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 identity=13144 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.18 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6l6vk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2634766a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3018 identity=13144 ipv4=10.0.0.18 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6l6vk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2634766a4a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3018 identity=13144 ipv4=10.0.0.18 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6l6vk subsys=endpoint level=info msg="Successful endpoint creation" containerID=2634766a4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3018 identity=13144 ipv4=10.0.0.18 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6l6vk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.111 e3351f21-54fd-43d6-994b-66376568a6e3 default }" containerID=d123aa0a32e84270709e9eaec096cbce91eccd5dd25b950f0b0deae9997d6b05 datapathConfiguration="&{false false false false false }" interface=lxc029c4e6ffcd9 k8sPodName=openstack/rook-ceph-detect-version-thlbt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d123aa0a32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3943 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rook-ceph-detect-version-thlbt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d123aa0a32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3943 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=0a88eee5-8704-4b81-ac7b-6df447df28cc,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=0a88eee5-8704-4b81-ac7b-6df447df28cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rook-ceph-detect-version-thlbt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d123aa0a32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3943 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rook-ceph-detect-version-thlbt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=0a88eee5-8704-4b81-ac7b-6df447df28cc;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=0a88eee5-8704-4b81-ac7b-6df447df28cc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d123aa0a32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3943 identity=53458 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=0a88eee5-8704-4b81-ac7b-6df447df28cc,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=0a88eee5-8704-4b81-ac7b-6df447df28cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rook-ceph-detect-version-thlbt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d123aa0a32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3943 identity=53458 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rook-ceph-detect-version-thlbt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d123aa0a32 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3943 identity=53458 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rook-ceph-detect-version-thlbt subsys=endpoint level=info msg="Successful endpoint creation" containerID=d123aa0a32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3943 identity=53458 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rook-ceph-detect-version-thlbt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d123aa0a32 endpointID=3943 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-thlbt subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=0a88eee5-8704-4b81-ac7b-6df447df28cc k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=0a88eee5-8704-4b81-ac7b-6df447df28cc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=d123aa0a32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3943 identity=53458 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rook-ceph-detect-version-thlbt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 7b73f268-8f36-4a5b-9e1e-05a0863ceab6 default }" containerID=ffd8dac4d6c6a81f86e334292bec5bb0c87a624a29cb2e6a6e112d438070fb63 datapathConfiguration="&{false false false false false }" interface=lxc282d6ec68adc k8sPodName=local-path-storage/helper-pod-create-pvc-b60f9fca-ece1-4bf9-ab86-805a56b6be2e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ffd8dac4d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1561 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b60f9fca-ece1-4bf9-ab86-805a56b6be2e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ffd8dac4d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1561 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b60f9fca-ece1-4bf9-ab86-805a56b6be2e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ffd8dac4d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1561 identity=25904 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b60f9fca-ece1-4bf9-ab86-805a56b6be2e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ffd8dac4d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1561 identity=25904 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b60f9fca-ece1-4bf9-ab86-805a56b6be2e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ffd8dac4d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1561 identity=25904 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b60f9fca-ece1-4bf9-ab86-805a56b6be2e subsys=endpoint level=info msg="Successful endpoint creation" containerID=ffd8dac4d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1561 identity=25904 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b60f9fca-ece1-4bf9-ab86-805a56b6be2e subsys=daemon level=info msg="Delete endpoint request" containerID=ffd8dac4d6 endpointID=1561 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b60f9fca-ece1-4bf9-ab86-805a56b6be2e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ffd8dac4d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1561 identity=25904 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b60f9fca-ece1-4bf9-ab86-805a56b6be2e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 e5aa0498-0fcd-43d8-ace6-6c7e8d2d6132 default }" containerID=75a30e7a30f894d0fdb62880cf8e1437eb65216725ee29ca1dd676ac5615cb83 datapathConfiguration="&{false false false false false }" interface=lxcc5fba49c5509 k8sPodName=openstack/ceph-object-controller-detect-version-mrw4w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75a30e7a30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrw4w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75a30e7a30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=86e012e7-3045-4c4d-bb5d-fe3dde9f9e1f,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=86e012e7-3045-4c4d-bb5d-fe3dde9f9e1f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrw4w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=75a30e7a30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.132 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrw4w line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=86e012e7-3045-4c4d-bb5d-fe3dde9f9e1f;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=86e012e7-3045-4c4d-bb5d-fe3dde9f9e1f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75a30e7a30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 identity=33771 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=86e012e7-3045-4c4d-bb5d-fe3dde9f9e1f,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=86e012e7-3045-4c4d-bb5d-fe3dde9f9e1f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrw4w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75a30e7a30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 identity=33771 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrw4w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=75a30e7a30 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=638 identity=33771 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrw4w subsys=endpoint level=info msg="Successful endpoint creation" containerID=75a30e7a30 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=638 identity=33771 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrw4w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.80 2b603e9b-b3a4-48ad-a6d7-f3f3db6b402d default }" containerID=98baa56d5daed2414375d9a970725bdf649cde23fd7338d05f7a7734e91be689 datapathConfiguration="&{false false false false false }" interface=lxc4af89fe4d717 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98baa56d5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1693 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98baa56d5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1693 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98baa56d5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1693 identity=6420 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98baa56d5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1693 identity=6420 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98baa56d5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1693 identity=6420 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=98baa56d5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1693 identity=6420 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=75a30e7a30 endpointID=638 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-mrw4w subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=86e012e7-3045-4c4d-bb5d-fe3dde9f9e1f k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=86e012e7-3045-4c4d-bb5d-fe3dde9f9e1f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=75a30e7a30 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=638 identity=33771 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mrw4w subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.181 17227157-0b87-49c7-ac18-fee4afd14f04 default }" containerID=c095ab3cf3b5ffb2e2c30d3958c581e90e3f660494e64363784b87401ec10a08 datapathConfiguration="&{false false false false false }" interface=lxc9d7deee31339 k8sPodName=openstack/glance-db-init-hgpzl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c095ab3cf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3951 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-hgpzl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c095ab3cf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3951 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3c61ae51-98b3-46c5-9ec0-de1036b9f449,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=3c61ae51-98b3-46c5-9ec0-de1036b9f449,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-hgpzl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c095ab3cf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3951 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-hgpzl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3c61ae51-98b3-46c5-9ec0-de1036b9f449;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=3c61ae51-98b3-46c5-9ec0-de1036b9f449;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c095ab3cf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3951 identity=47645 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3c61ae51-98b3-46c5-9ec0-de1036b9f449,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=3c61ae51-98b3-46c5-9ec0-de1036b9f449,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-hgpzl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c095ab3cf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3951 identity=47645 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-hgpzl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c095ab3cf3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3951 identity=47645 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-hgpzl subsys=endpoint level=info msg="Successful endpoint creation" containerID=c095ab3cf3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3951 identity=47645 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-hgpzl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c095ab3cf3 endpointID=3951 k8sNamespace=openstack k8sPodName=glance-db-init-hgpzl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3c61ae51-98b3-46c5-9ec0-de1036b9f449 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=3c61ae51-98b3-46c5-9ec0-de1036b9f449 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c095ab3cf3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3951 identity=47645 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-hgpzl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 c2b32d7e-94e3-4994-a826-e8ab04ba52ab default }" containerID=52c30cc5cb4eda645018dc94953025a8848ee3f37e39e6382cb4889a4e2152c0 datapathConfiguration="&{false false false false false }" interface=lxc8536918fab80 k8sPodName=openstack/glance-db-sync-26rfv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52c30cc5cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-db-sync-26rfv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52c30cc5cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=20f2e10d-7e64-4dc0-aad2-7a633074079f,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=20f2e10d-7e64-4dc0-aad2-7a633074079f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-db-sync-26rfv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=20f2e10d-7e64-4dc0-aad2-7a633074079f;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=20f2e10d-7e64-4dc0-aad2-7a633074079f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52c30cc5cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 identity=9706 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=20f2e10d-7e64-4dc0-aad2-7a633074079f,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=20f2e10d-7e64-4dc0-aad2-7a633074079f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-db-sync-26rfv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=52c30cc5cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 identity=9706 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-db-sync-26rfv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=52c30cc5cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2691 identity=9706 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-db-sync-26rfv subsys=endpoint level=info msg="Successful endpoint creation" containerID=52c30cc5cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2691 identity=9706 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-db-sync-26rfv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.38 54cb8eaa-f0b2-4900-a0d3-362c2b251c60 default }" containerID=8b35ecc41b8df76dbc4e0809fb22b066b3a4224a9e87c6c8f19648da8b9812f4 datapathConfiguration="&{false false false false false }" interface=lxc0075d1039c09 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rvcjt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b35ecc41b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rvcjt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b35ecc41b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rvcjt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b35ecc41b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=30334 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rvcjt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b35ecc41b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=30334 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rvcjt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.142 f9bf24ed-014a-4908-ab00-7e74a100795e default }" containerID=57e9b7c21e63f97afe6c47c397a37d23c4c0c717a0511c04445340136f38a36c datapathConfiguration="&{false false false false false }" interface=lxcb50b880ee909 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lk5mv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57e9b7c21e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=963 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lk5mv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57e9b7c21e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=963 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lk5mv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57e9b7c21e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=963 identity=21719 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lk5mv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57e9b7c21e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=963 identity=21719 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lk5mv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b35ecc41b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=555 identity=30334 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rvcjt subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b35ecc41b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=555 identity=30334 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rvcjt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=57e9b7c21e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=963 identity=21719 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lk5mv subsys=endpoint level=info msg="Successful endpoint creation" containerID=57e9b7c21e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=963 identity=21719 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lk5mv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=52c30cc5cb endpointID=2691 k8sNamespace=openstack k8sPodName=glance-db-sync-26rfv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=20f2e10d-7e64-4dc0-aad2-7a633074079f k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=20f2e10d-7e64-4dc0-aad2-7a633074079f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=52c30cc5cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2691 identity=9706 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-db-sync-26rfv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 e167626d-27cf-4945-a582-4a0bc7de54de default }" containerID=73e97e8640a02da305584fa98d9e97a9914815607a2f0a6dbb0e139b9a645995 datapathConfiguration="&{false false false false false }" interface=lxc1412a47d62e8 k8sPodName=openstack/glance-rabbit-init-nsxbq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73e97e8640 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-rabbit-init-nsxbq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73e97e8640 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1f55b522-b282-47f0-84c3-1b1edbfed1a5,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1f55b522-b282-47f0-84c3-1b1edbfed1a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-rabbit-init-nsxbq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1f55b522-b282-47f0-84c3-1b1edbfed1a5;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1f55b522-b282-47f0-84c3-1b1edbfed1a5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73e97e8640 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 identity=36747 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1f55b522-b282-47f0-84c3-1b1edbfed1a5,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1f55b522-b282-47f0-84c3-1b1edbfed1a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-rabbit-init-nsxbq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73e97e8640 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 identity=36747 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-rabbit-init-nsxbq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=73e97e8640 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3818 identity=36747 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-rabbit-init-nsxbq subsys=endpoint level=info msg="Successful endpoint creation" containerID=73e97e8640 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3818 identity=36747 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-rabbit-init-nsxbq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=73e97e8640 endpointID=3818 k8sNamespace=openstack k8sPodName=glance-rabbit-init-nsxbq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1f55b522-b282-47f0-84c3-1b1edbfed1a5 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1f55b522-b282-47f0-84c3-1b1edbfed1a5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=73e97e8640 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3818 identity=36747 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-rabbit-init-nsxbq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 6b04428a-331d-4103-bbac-b055cbe65de5 default }" containerID=a42ea9daf9a33e593d3a8958424cebf079cf0798011957b3c798860dbddffe88 datapathConfiguration="&{false false false false false }" interface=lxc7698b6371dea k8sPodName=openstack/glance-ks-service-pbjzd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a42ea9daf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-ks-service-pbjzd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a42ea9daf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3e49f29e-3bee-498c-9dfd-49d54c802993,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=3e49f29e-3bee-498c-9dfd-49d54c802993,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-ks-service-pbjzd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a42ea9daf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-ks-service-pbjzd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3e49f29e-3bee-498c-9dfd-49d54c802993;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=3e49f29e-3bee-498c-9dfd-49d54c802993;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a42ea9daf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 identity=29260 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3e49f29e-3bee-498c-9dfd-49d54c802993,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=3e49f29e-3bee-498c-9dfd-49d54c802993,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-ks-service-pbjzd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a42ea9daf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 identity=29260 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-ks-service-pbjzd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a42ea9daf9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1137 identity=29260 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-ks-service-pbjzd subsys=endpoint level=info msg="Successful endpoint creation" containerID=a42ea9daf9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1137 identity=29260 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-ks-service-pbjzd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a42ea9daf9 endpointID=1137 k8sNamespace=openstack k8sPodName=glance-ks-service-pbjzd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3e49f29e-3bee-498c-9dfd-49d54c802993 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=3e49f29e-3bee-498c-9dfd-49d54c802993 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a42ea9daf9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1137 identity=29260 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-ks-service-pbjzd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 7ce4f358-4cda-4999-8d18-0e760845f77b default }" containerID=6f3eccf4489433d52bc73abbd3f17e1ebf8fe509528fd6014862174f9434d065 datapathConfiguration="&{false false false false false }" interface=lxc7f1e702eb858 k8sPodName=openstack/glance-ks-endpoints-zjj6v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f3eccf448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1695 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-ks-endpoints-zjj6v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f3eccf448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1695 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7ac5acee-580b-4e90-a869-e3db91b2c980,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7ac5acee-580b-4e90-a869-e3db91b2c980,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-ks-endpoints-zjj6v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7ac5acee-580b-4e90-a869-e3db91b2c980;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=7ac5acee-580b-4e90-a869-e3db91b2c980;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f3eccf448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1695 identity=36131 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7ac5acee-580b-4e90-a869-e3db91b2c980,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7ac5acee-580b-4e90-a869-e3db91b2c980,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-ks-endpoints-zjj6v oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6f3eccf448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1695 identity=36131 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-ks-endpoints-zjj6v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6f3eccf448 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1695 identity=36131 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-ks-endpoints-zjj6v subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f3eccf448 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1695 identity=36131 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-ks-endpoints-zjj6v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6f3eccf448 endpointID=1695 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-zjj6v subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7ac5acee-580b-4e90-a869-e3db91b2c980 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=7ac5acee-580b-4e90-a869-e3db91b2c980 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6f3eccf448 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1695 identity=36131 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-ks-endpoints-zjj6v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 2c53b427-8795-488f-a77b-88e111e0307a default }" containerID=12ad023827cd46e5abed70cc11591404fbbd8b222f859651a7fb9834eee326ee datapathConfiguration="&{false false false false false }" interface=lxcfa428f1674f9 k8sPodName=openstack/glance-ks-user-6cxhq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12ad023827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3983 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-6cxhq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12ad023827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3983 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bce79606-f35b-47d5-a239-a8f7a5a47de4,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=bce79606-f35b-47d5-a239-a8f7a5a47de4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-6cxhq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=12ad023827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3983 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-6cxhq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bce79606-f35b-47d5-a239-a8f7a5a47de4;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=bce79606-f35b-47d5-a239-a8f7a5a47de4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12ad023827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3983 identity=6086 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bce79606-f35b-47d5-a239-a8f7a5a47de4,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=bce79606-f35b-47d5-a239-a8f7a5a47de4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-6cxhq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12ad023827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3983 identity=6086 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-6cxhq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=12ad023827 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3983 identity=6086 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-6cxhq subsys=endpoint level=info msg="Successful endpoint creation" containerID=12ad023827 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3983 identity=6086 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-6cxhq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=12ad023827 endpointID=3983 k8sNamespace=openstack k8sPodName=glance-ks-user-6cxhq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bce79606-f35b-47d5-a239-a8f7a5a47de4 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=bce79606-f35b-47d5-a239-a8f7a5a47de4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=12ad023827 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3983 identity=6086 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-user-6cxhq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 21f6d46c-dda9-4de0-8568-6e6e96e28670 default }" containerID=f720a5543145a0e78e9c9ccc0e6369b17bc1e75ac0beeabf986becc777c7276f datapathConfiguration="&{false false false false false }" interface=lxceb78b2d90aaa k8sPodName=openstack/glance-metadefs-load-6849v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f720a55431 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=649 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-metadefs-load-6849v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f720a55431 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=649 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=27030c6f-53c3-46ed-b4d2-0ad0f9813de9,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=27030c6f-53c3-46ed-b4d2-0ad0f9813de9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-metadefs-load-6849v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=27030c6f-53c3-46ed-b4d2-0ad0f9813de9;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=27030c6f-53c3-46ed-b4d2-0ad0f9813de9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f720a55431 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=649 identity=49979 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=27030c6f-53c3-46ed-b4d2-0ad0f9813de9,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=27030c6f-53c3-46ed-b4d2-0ad0f9813de9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-metadefs-load-6849v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f720a55431 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=649 identity=49979 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-metadefs-load-6849v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f720a55431 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=649 identity=49979 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-metadefs-load-6849v subsys=endpoint level=info msg="Successful endpoint creation" containerID=f720a55431 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=649 identity=49979 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-metadefs-load-6849v subsys=daemon level=info msg="Delete endpoint request" containerID=f720a55431 endpointID=649 k8sNamespace=openstack k8sPodName=glance-metadefs-load-6849v subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=27030c6f-53c3-46ed-b4d2-0ad0f9813de9 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=27030c6f-53c3-46ed-b4d2-0ad0f9813de9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f720a55431 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=649 identity=49979 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/glance-metadefs-load-6849v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 69993460-766a-4338-83f2-32185e95e58a default }" containerID=c63a9238c525d1d89483e3a9432d5d83e09b5a592ad41955382a752b01204b51 datapathConfiguration="&{false false false false false }" interface=lxcd3ca4226e846 k8sPodName=openstack/glance-storage-init-kk6z5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c63a9238c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-kk6z5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c63a9238c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b9185b39-a6bc-4012-9b92-b38f96d434f4,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=b9185b39-a6bc-4012-9b92-b38f96d434f4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-kk6z5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b9185b39-a6bc-4012-9b92-b38f96d434f4;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=b9185b39-a6bc-4012-9b92-b38f96d434f4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c63a9238c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 identity=24417 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b9185b39-a6bc-4012-9b92-b38f96d434f4,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=b9185b39-a6bc-4012-9b92-b38f96d434f4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-kk6z5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c63a9238c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 identity=24417 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-kk6z5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c63a9238c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1153 identity=24417 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-kk6z5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c63a9238c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1153 identity=24417 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-kk6z5 subsys=daemon level=info msg="Delete endpoint request" containerID=c63a9238c5 endpointID=1153 k8sNamespace=openstack k8sPodName=glance-storage-init-kk6z5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b9185b39-a6bc-4012-9b92-b38f96d434f4 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=b9185b39-a6bc-4012-9b92-b38f96d434f4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c63a9238c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1153 identity=24417 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-kk6z5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 5b5d21eb-ada2-42f1-8674-51e8f63c64a5 default }" containerID=1bc3c6c4c6fb50eb02d53764b2b2ba53436b1de0dbba475a3be6ba6cd148fec0 datapathConfiguration="&{false false false false false }" interface=lxcf7c0f5b4ddbd k8sPodName=openstack/glance-api-64f5cbf74d-shdd7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bc3c6c4c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1928 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-api-64f5cbf74d-shdd7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bc3c6c4c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1928 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-api-64f5cbf74d-shdd7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1bc3c6c4c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1928 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-api-64f5cbf74d-shdd7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1bc3c6c4c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1928 identity=45516 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-api-64f5cbf74d-shdd7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1bc3c6c4c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1928 identity=45516 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-api-64f5cbf74d-shdd7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1bc3c6c4c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1928 identity=45516 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-api-64f5cbf74d-shdd7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bc3c6c4c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1928 identity=45516 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-api-64f5cbf74d-shdd7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.87 5125e8b5-390c-4571-ad12-3a7fc2382907 default }" containerID=d63afa84212373c45a7d607c2413e1472ea2f1315c89c242be35d0556d3fc497 datapathConfiguration="&{false false false false false }" interface=lxc2d725151f3ad k8sPodName=openstack/staffeln-api-6d9444d7c9-pdfvf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d63afa8421 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2994 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/staffeln-api-6d9444d7c9-pdfvf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d63afa8421 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2994 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/staffeln-api-6d9444d7c9-pdfvf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d63afa8421 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2994 identity=43497 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/staffeln-api-6d9444d7c9-pdfvf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d63afa8421 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2994 identity=43497 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/staffeln-api-6d9444d7c9-pdfvf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.75 120102ec-d646-4f8d-a3bd-2c76258f2a3a default }" containerID=6ea3e4083bb1a38e5775f4b2ff4b1aed39ee2e09baa93dd77d4f95f9da08e3b0 datapathConfiguration="&{false false false false false }" interface=lxcf2f14a367c18 k8sPodName=openstack/staffeln-db-init-8qkjr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ea3e4083b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/staffeln-db-init-8qkjr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ea3e4083b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6aeeeda8-7025-42cc-9a7f-94e5622a40f7,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=6aeeeda8-7025-42cc-9a7f-94e5622a40f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/staffeln-db-init-8qkjr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=6aeeeda8-7025-42cc-9a7f-94e5622a40f7;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=6aeeeda8-7025-42cc-9a7f-94e5622a40f7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ea3e4083b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identity=29599 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6aeeeda8-7025-42cc-9a7f-94e5622a40f7,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=6aeeeda8-7025-42cc-9a7f-94e5622a40f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/staffeln-db-init-8qkjr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ea3e4083b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identity=29599 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/staffeln-db-init-8qkjr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 a2d86061-1e3b-416d-ac12-fb3e453e1b59 default }" containerID=7f7d9286207104f8a5a9e327f197e57922f23496084823d299e0026877db0961 datapathConfiguration="&{false false false false false }" interface=lxc361c7dec9c78 k8sPodName=openstack/staffeln-conductor-688757d484-l9mqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f7d928620 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2519 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/staffeln-conductor-688757d484-l9mqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f7d928620 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2519 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/staffeln-conductor-688757d484-l9mqb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f7d928620 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2519 identity=53020 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/staffeln-conductor-688757d484-l9mqb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f7d928620 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2519 identity=53020 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/staffeln-conductor-688757d484-l9mqb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d63afa8421 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2994 identity=43497 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/staffeln-api-6d9444d7c9-pdfvf subsys=endpoint level=info msg="Successful endpoint creation" containerID=d63afa8421 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2994 identity=43497 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/staffeln-api-6d9444d7c9-pdfvf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6ea3e4083b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=354 identity=29599 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/staffeln-db-init-8qkjr subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ea3e4083b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=354 identity=29599 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/staffeln-db-init-8qkjr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7f7d928620 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2519 identity=53020 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/staffeln-conductor-688757d484-l9mqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f7d928620 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2519 identity=53020 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/staffeln-conductor-688757d484-l9mqb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6ea3e4083b endpointID=354 k8sNamespace=openstack k8sPodName=staffeln-db-init-8qkjr subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=6aeeeda8-7025-42cc-9a7f-94e5622a40f7 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=6aeeeda8-7025-42cc-9a7f-94e5622a40f7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=6ea3e4083b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=354 identity=29599 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/staffeln-db-init-8qkjr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 2bb60297-0287-4c34-8082-daebf545ae12 default }" containerID=8aa35c26e632f838b37707036aaea24c65ee382e49b9347b70abed1c0ca9159a datapathConfiguration="&{false false false false false }" interface=lxc8e91fe602095 k8sPodName=openstack/staffeln-db-sync-djz4r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8aa35c26e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/staffeln-db-sync-djz4r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8aa35c26e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=64e8231d-f87e-4f7c-ae94-fdda374882c8,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=64e8231d-f87e-4f7c-ae94-fdda374882c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/staffeln-db-sync-djz4r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=64e8231d-f87e-4f7c-ae94-fdda374882c8;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=64e8231d-f87e-4f7c-ae94-fdda374882c8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8aa35c26e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identity=861 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=64e8231d-f87e-4f7c-ae94-fdda374882c8,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=64e8231d-f87e-4f7c-ae94-fdda374882c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/staffeln-db-sync-djz4r oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8aa35c26e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identity=861 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/staffeln-db-sync-djz4r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8aa35c26e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=66 identity=861 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/staffeln-db-sync-djz4r subsys=endpoint level=info msg="Successful endpoint creation" containerID=8aa35c26e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=66 identity=861 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/staffeln-db-sync-djz4r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.04843967697864109 newInterval=16m53s subsys=map-ct