level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="757.015µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="44.111µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="783.745µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.41µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=95.319273ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.85µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="14.75µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="54.841µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="63.272µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="67.251µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="442.038µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.22µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=13.256291ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.533161ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="32.171µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="36.121µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="197.154µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="93.862µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="63.901µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=47.452048ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="77.681µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="10.591µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.12µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.44.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.754413ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="12.05µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.211367ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="6.81µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.768566ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.471µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.66µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.36µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.61µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.76µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="33.121µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="15.85µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="89.341µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="257.134µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.08µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.78µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="164.144µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="658.242µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.856156ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="10.62µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="27.85µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.44 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.44 ipAddr.ipv6="" k8sNodeIP=199.204.45.44 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.44" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.194" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.44" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.44} {CiliumInternalIP 10.0.0.194}] 10.0.0.0/24 [] [] 10.0.0.49 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:40339" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.439741339s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="18.29µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="7.7µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="59.582µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="3.65µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1791 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1791 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1791 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.390514257s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.181 1f9b3f18-e5a4-4aa6-8ce2-2b753aad7fa6 default }" containerID=daac39b3a8200d7842f64aa618cf012661e381cbe55fc79355f6e3e31c4427ee datapathConfiguration="&{false false false false false }" interface=lxc01d0e3acedcc k8sPodName=kube-system/coredns-7c96b6546b-nb9t8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=daac39b3a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 ipv4=10.0.0.181 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nb9t8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=daac39b3a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.181 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nb9t8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=daac39b3a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.181 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nb9t8 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=daac39b3a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 identity=32051 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.181 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nb9t8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=daac39b3a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 identity=32051 ipv4=10.0.0.181 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nb9t8 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=307.646201ms file-path=/var/run/cilium/state/templates/0511971179fcbaf74380d19fb3cb125aa8b54fadcf4bcc31d1c6838d55cc9168/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1791 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 34eb1d5f-c167-4325-8024-bf2570592c98 default }" containerID=0743ec053884ce82cb0b2a156a345b3bbc4692d2ecab585542e731f6bbf708ee datapathConfiguration="&{false false false false false }" interface=lxc0205dceec8e7 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k5nrs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0743ec0538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 ipv4=10.0.0.109 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k5nrs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0743ec0538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=f709c86b-9e9b-4ba5-a0d3-5cd59fd8166a,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=f709c86b-9e9b-4ba5-a0d3-5cd59fd8166a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.109 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k5nrs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=f709c86b-9e9b-4ba5-a0d3-5cd59fd8166a;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=f709c86b-9e9b-4ba5-a0d3-5cd59fd8166a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0743ec0538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 identity=40384 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=f709c86b-9e9b-4ba5-a0d3-5cd59fd8166a,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=f709c86b-9e9b-4ba5-a0d3-5cd59fd8166a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.109 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k5nrs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0743ec0538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 identity=40384 ipv4=10.0.0.109 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k5nrs subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1343 ipv4=10.0.0.49 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1343 identityLabels="reserved:health" ipv4=10.0.0.49 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1343 identity=4 identityLabels="reserved:health" ipv4=10.0.0.49 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.08508271s file-path=/var/run/cilium/state/templates/fbe54440d628ac50750efe1041a5774c8a48418175a666ea953305b3d8906d81/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=daac39b3a8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1684 identity=32051 ipv4=10.0.0.181 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nb9t8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=daac39b3a8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1684 identity=32051 ipv4=10.0.0.181 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nb9t8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0743ec0538 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1001 identity=40384 ipv4=10.0.0.109 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k5nrs subsys=endpoint level=info msg="Successful endpoint creation" containerID=0743ec0538 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1001 identity=40384 ipv4=10.0.0.109 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k5nrs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1343 identity=4 ipv4=10.0.0.49 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0743ec0538 endpointID=1001 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-k5nrs subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=f709c86b-9e9b-4ba5-a0d3-5cd59fd8166a k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=f709c86b-9e9b-4ba5-a0d3-5cd59fd8166a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=0743ec0538 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1001 identity=40384 ipv4=10.0.0.109 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k5nrs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 555be8ec-0eb1-4c7f-8e5f-a87e0133d589 default }" containerID=060bf6175ac50e0d7a3c91741f73d5f066f260c60ca39ae09eac00a233ee1268 datapathConfiguration="&{false false false false false }" interface=lxc78d27d28016b k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zfr24 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=060bf6175a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2642 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zfr24 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=060bf6175a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2642 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zfr24 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=060bf6175a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2642 identity=27243 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zfr24 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=060bf6175a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2642 identity=27243 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zfr24 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=060bf6175a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2642 identity=27243 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zfr24 subsys=endpoint level=info msg="Successful endpoint creation" containerID=060bf6175a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2642 identity=27243 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zfr24 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1791 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01791 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01791 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01791 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01791:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1791 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 aef46ba5-f547-4705-af6c-d5dc41764e27 default }" containerID=6570203b5589a45df78b0fd324df2533c904afbd4a3ec28359ad57848e0f22bf datapathConfiguration="&{false false false false false }" interface=lxc4a5e4418184a k8sPodName=kube-system/coredns-67659f764b-h8hgq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6570203b55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 ipv4=10.0.0.170 ipv6= k8sPodName=kube-system/coredns-67659f764b-h8hgq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6570203b55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.170 ipv6= k8sPodName=kube-system/coredns-67659f764b-h8hgq subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6570203b55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 identity=32051 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.170 ipv6= k8sPodName=kube-system/coredns-67659f764b-h8hgq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6570203b55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2627 identity=32051 ipv4=10.0.0.170 ipv6= k8sPodName=kube-system/coredns-67659f764b-h8hgq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 d89a24d1-0f49-4abb-b3b1-af1677076999 default }" containerID=8a1f0aace634321d7c6b8ae7117aa6d2ea8bbac9f965488daa313af8dd7b3214 datapathConfiguration="&{false false false false false }" interface=lxc213dedb79f9d k8sPodName=kube-system/coredns-67659f764b-nnm2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a1f0aace6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 ipv4=10.0.0.110 ipv6= k8sPodName=kube-system/coredns-67659f764b-nnm2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a1f0aace6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.110 ipv6= k8sPodName=kube-system/coredns-67659f764b-nnm2c subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8a1f0aace6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identity=32051 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.110 ipv6= k8sPodName=kube-system/coredns-67659f764b-nnm2c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a1f0aace6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identity=32051 ipv4=10.0.0.110 ipv6= k8sPodName=kube-system/coredns-67659f764b-nnm2c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6570203b55 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2627 identity=32051 ipv4=10.0.0.170 ipv6= k8sPodName=kube-system/coredns-67659f764b-h8hgq subsys=endpoint level=info msg="Successful endpoint creation" containerID=6570203b55 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2627 identity=32051 ipv4=10.0.0.170 ipv6= k8sPodName=kube-system/coredns-67659f764b-h8hgq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8a1f0aace6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=65 identity=32051 ipv4=10.0.0.110 ipv6= k8sPodName=kube-system/coredns-67659f764b-nnm2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a1f0aace6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=65 identity=32051 ipv4=10.0.0.110 ipv6= k8sPodName=kube-system/coredns-67659f764b-nnm2c subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.90 17ce6dc9-09a3-402a-9b42-06af6457dea2 default }" containerID=d41e9644ddbf2b66486e655055adc865295f1bd52914c467dbf2320909dbf683 datapathConfiguration="&{false false false false false }" interface=lxc1e66e1c099a1 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-9m26g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d41e9644dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2385 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-9m26g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d41e9644dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2385 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-9m26g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d41e9644dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2385 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-9m26g line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d41e9644dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2385 identity=44259 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-9m26g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d41e9644dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2385 identity=44259 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-9m26g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d41e9644dd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2385 identity=44259 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-9m26g subsys=endpoint level=info msg="Successful endpoint creation" containerID=d41e9644dd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2385 identity=44259 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-9m26g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=daac39b3a8 endpointID=1684 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-nb9t8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=daac39b3a8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1684 identity=32051 ipv4=10.0.0.181 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nb9t8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 83200fdc-9ba9-4b01-b88b-5eafcfe6468c default }" containerID=0423c41f9b826ab9dad1aac48bb6914d2521da63d0b0773f6828bab57e5836c8 datapathConfiguration="&{false false false false false }" interface=lxc8ffccd7ce6a8 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m7msx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0423c41f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2664 ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m7msx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0423c41f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2664 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m7msx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0423c41f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2664 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m7msx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0423c41f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2664 identity=5148 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m7msx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0423c41f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2664 identity=5148 ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m7msx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 ffe8acf1-3a06-4cc3-9fb8-28eae38ab298 default }" containerID=0beb8a6725c91b84c8d562172605b2571b93459c2fb68c1b3efe205e46eda239 datapathConfiguration="&{false false false false false }" interface=lxcd29195cfda58 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-t595h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0beb8a6725 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2619 ipv4=10.0.0.81 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-t595h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0beb8a6725 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2619 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.81 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-t595h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0beb8a6725 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2619 identity=57153 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.81 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-t595h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0beb8a6725 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2619 identity=57153 ipv4=10.0.0.81 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-t595h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 ba9bb5e6-1f5b-4501-8d88-7cf0e99f0558 default }" containerID=6ac20f6bd3fc168bd85f34d68281c9af1cf0009ac2a3d5cd6e8f4a736964e434 datapathConfiguration="&{false false false false false }" interface=lxcabf54cb414c8 k8sPodName=cert-manager/cert-manager-75c4c745bc-qpbsb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ac20f6bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qpbsb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ac20f6bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qpbsb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ac20f6bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identity=2241 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qpbsb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ac20f6bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identity=2241 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qpbsb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0423c41f9b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2664 identity=5148 ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m7msx subsys=endpoint level=info msg="Successful endpoint creation" containerID=0423c41f9b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2664 identity=5148 ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m7msx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0beb8a6725 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2619 identity=57153 ipv4=10.0.0.81 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-t595h subsys=endpoint level=info msg="Successful endpoint creation" containerID=0beb8a6725 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2619 identity=57153 ipv4=10.0.0.81 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-t595h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6ac20f6bd3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=270 identity=2241 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qpbsb subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ac20f6bd3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=270 identity=2241 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qpbsb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.64 68036f16-a385-4755-b076-7496a3d7296a default }" containerID=4c0e9c14e64aecf68ac85ec32c5e5983aa0a805ff92d68a0a667e1207d351e83 datapathConfiguration="&{false false false false false }" interface=lxc036c4e546d40 k8sPodName=cert-manager/cert-manager-startupapicheck-w96p2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c0e9c14e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-w96p2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c0e9c14e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=fd5a4566-da41-44d9-9087-9354ea68516d,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=fd5a4566-da41-44d9-9087-9354ea68516d,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-w96p2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=fd5a4566-da41-44d9-9087-9354ea68516d;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=fd5a4566-da41-44d9-9087-9354ea68516d;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c0e9c14e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identity=10707 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=fd5a4566-da41-44d9-9087-9354ea68516d,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=fd5a4566-da41-44d9-9087-9354ea68516d,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-w96p2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c0e9c14e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identity=10707 ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-w96p2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c0e9c14e6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=101 identity=10707 ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-w96p2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c0e9c14e6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=101 identity=10707 ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-w96p2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4c0e9c14e6 endpointID=101 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-w96p2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=fd5a4566-da41-44d9-9087-9354ea68516d k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=fd5a4566-da41-44d9-9087-9354ea68516d k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=4c0e9c14e6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=101 identity=10707 ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-w96p2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 e53dc4c0-b8ee-4d91-9f17-25cb2cc2fa61 default }" containerID=eaf0bf526aef3596c4ae7dc84c2ea4bd88e4e35d10bc0922f263fa7f188aa01c datapathConfiguration="&{false false false false false }" interface=lxccb97ca8dcc89 k8sPodName=ingress-nginx/ingress-nginx-admission-create-gzp9g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eaf0bf526a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 ipv4=10.0.0.100 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gzp9g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eaf0bf526a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6a21323c-d54f-4ceb-a9e0-bbd792828eab,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=6a21323c-d54f-4ceb-a9e0-bbd792828eab,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.100 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gzp9g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=6a21323c-d54f-4ceb-a9e0-bbd792828eab;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=6a21323c-d54f-4ceb-a9e0-bbd792828eab;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=eaf0bf526a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identity=4321 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6a21323c-d54f-4ceb-a9e0-bbd792828eab,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=6a21323c-d54f-4ceb-a9e0-bbd792828eab,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.100 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gzp9g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eaf0bf526a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identity=4321 ipv4=10.0.0.100 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gzp9g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eaf0bf526a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=246 identity=4321 ipv4=10.0.0.100 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gzp9g subsys=endpoint level=info msg="Successful endpoint creation" containerID=eaf0bf526a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=246 identity=4321 ipv4=10.0.0.100 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gzp9g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eaf0bf526a endpointID=246 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-gzp9g subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=6a21323c-d54f-4ceb-a9e0-bbd792828eab k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=6a21323c-d54f-4ceb-a9e0-bbd792828eab k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=eaf0bf526a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=246 identity=4321 ipv4=10.0.0.100 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gzp9g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 8bb1d124-bb94-4199-9638-2bb6f3672b8a default }" containerID=7946e54b80e2f3250b9846c33f025e37fafd1da112bb11dac39da6e32d590c27 datapathConfiguration="&{false false false false false }" interface=lxc73a88eccde7a k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5fth labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7946e54b80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 ipv4=10.0.0.171 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5fth subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7946e54b80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.171 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5fth subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7946e54b80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.171 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5fth line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7946e54b80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identity=5041 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.171 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5fth oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7946e54b80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identity=5041 ipv4=10.0.0.171 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5fth subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7946e54b80 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1092 identity=5041 ipv4=10.0.0.171 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5fth subsys=endpoint level=info msg="Successful endpoint creation" containerID=7946e54b80 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1092 identity=5041 ipv4=10.0.0.171 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5fth subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.187 a2f13691-6576-4f16-a48a-6928c1983bd4 default }" containerID=2e6c7c8a24e18d5b17a3e07811f9dbfe89cd97ec3e7f22d5bac41c75157b3b4d datapathConfiguration="&{false false false false false }" interface=lxc728223662396 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-q76lt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e6c7c8a24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 ipv4=10.0.0.187 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-q76lt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e6c7c8a24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=0fc6d29f-03e7-4117-9631-0d1e6f0e9929,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=0fc6d29f-03e7-4117-9631-0d1e6f0e9929,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.187 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-q76lt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=0fc6d29f-03e7-4117-9631-0d1e6f0e9929;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=0fc6d29f-03e7-4117-9631-0d1e6f0e9929;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e6c7c8a24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=25724 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=0fc6d29f-03e7-4117-9631-0d1e6f0e9929,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=0fc6d29f-03e7-4117-9631-0d1e6f0e9929,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.187 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-q76lt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e6c7c8a24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=25724 ipv4=10.0.0.187 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-q76lt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2e6c7c8a24 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=405 identity=25724 ipv4=10.0.0.187 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-q76lt subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e6c7c8a24 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=405 identity=25724 ipv4=10.0.0.187 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-q76lt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2e6c7c8a24 endpointID=405 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-q76lt subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=0fc6d29f-03e7-4117-9631-0d1e6f0e9929 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=0fc6d29f-03e7-4117-9631-0d1e6f0e9929 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=2e6c7c8a24 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=405 identity=25724 ipv4=10.0.0.187 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-q76lt subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=0dd312f7-7cb5-4a3a-ad74-c08db5a815b6] Description:}]" policyAddRequest=54e7ac85-a905-4a51-af96-cc73228b66f6 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=54e7ac85-a905-4a51-af96-cc73228b66f6 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=082d66e4-e22e-4c7e-92ef-216c91df9340] Description:}]" policyAddRequest=b93b0809-6023-4386-a08d-dbc54a3db8ba subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=b93b0809-6023-4386-a08d-dbc54a3db8ba policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.115 01b03ad3-15f5-4fd2-a395-cc525b2c895a default }" containerID=ecfbdeeaefc694c9e661386feed756523e41d80b9410e29041ca19d427ef1b8e datapathConfiguration="&{false false false false false }" interface=lxc738f3b861252 k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-kxxcs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ecfbdeeaef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2572 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-kxxcs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ecfbdeeaef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2572 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-kxxcs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ecfbdeeaef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2572 identity=7273 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-kxxcs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ecfbdeeaef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2572 identity=7273 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-kxxcs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ecfbdeeaef datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2572 identity=7273 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-kxxcs subsys=endpoint level=info msg="Successful endpoint creation" containerID=ecfbdeeaef datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2572 identity=7273 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-kxxcs subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.161 65ddc6c5-54b6-4cd1-80f3-4f14f5e9f140 default }" containerID=994521f212518976ce20b7354a0e90f04a59b06d29efa17bac9fe8e5497343ff datapathConfiguration="&{false false false false false }" interface=lxcb8d3e7152f18 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-gd7b6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=994521f212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1430 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-gd7b6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=994521f212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1430 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-gd7b6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=994521f212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1430 identity=31547 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-gd7b6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=994521f212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1430 identity=31547 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-gd7b6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=994521f212 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1430 identity=31547 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-gd7b6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=994521f212 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1430 identity=31547 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-gd7b6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.124 018b3e72-3169-4ecf-a5d3-a0e41f01983a default }" containerID=bcaacbe6503e4fb6ed2e060fa0b51fc500f86fd76a48e8ad351974a82bdc19d7 datapathConfiguration="&{false false false false false }" interface=lxc016dbcbebf02 k8sPodName=openstack/pxc-operator-7cff949c8b-l8h7k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bcaacbe650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-l8h7k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bcaacbe650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-l8h7k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bcaacbe650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.124 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-l8h7k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bcaacbe650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 identity=2179 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-l8h7k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bcaacbe650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 identity=2179 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-l8h7k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bcaacbe650 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1414 identity=2179 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-l8h7k subsys=endpoint level=info msg="Successful endpoint creation" containerID=bcaacbe650 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1414 identity=2179 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-l8h7k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.254 84a2bad8-8630-49a2-848f-d6c09b57f422 default }" containerID=2f974291ab56a90aae51d9968ae3b7cd6c110652637b7a088d4d60f43b5354f4 datapathConfiguration="&{false false false false false }" interface=lxcb37b78fda162 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f974291ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2909 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f974291ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2909 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f974291ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2909 identity=55425 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f974291ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2909 identity=55425 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.213 d18e4ba0-dba7-4d5c-84dd-facc5f9c770c default }" containerID=593e38498a1a39244e829f320f640d2f6be19843f537712a1015f87092a75a0c datapathConfiguration="&{false false false false false }" interface=lxcf133c9ccf79f k8sPodName=local-path-storage/helper-pod-create-pvc-df440281-1f9b-4401-803e-75fc3e35a51c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=593e38498a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2846 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df440281-1f9b-4401-803e-75fc3e35a51c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=593e38498a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2846 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df440281-1f9b-4401-803e-75fc3e35a51c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=593e38498a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2846 identity=16809 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df440281-1f9b-4401-803e-75fc3e35a51c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=593e38498a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2846 identity=16809 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df440281-1f9b-4401-803e-75fc3e35a51c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f974291ab datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2909 identity=55425 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f974291ab datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2909 identity=55425 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=593e38498a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2846 identity=16809 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df440281-1f9b-4401-803e-75fc3e35a51c subsys=endpoint level=info msg="Successful endpoint creation" containerID=593e38498a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2846 identity=16809 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df440281-1f9b-4401-803e-75fc3e35a51c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=593e38498a endpointID=2846 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-df440281-1f9b-4401-803e-75fc3e35a51c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=593e38498a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2846 identity=16809 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df440281-1f9b-4401-803e-75fc3e35a51c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 377c750b-e86f-4dde-bf35-3d8c489f10e3 default }" containerID=1122d4567048cd88d1064d43fcf38b1ace6ea4d2e2140446c7db79518f3a2e0c datapathConfiguration="&{false false false false false }" interface=lxcca2e1f2922ee k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1122d45670 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2563 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1122d45670 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2563 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1122d45670 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2563 identity=9881 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1122d45670 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2563 identity=9881 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1122d45670 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2563 identity=9881 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1122d45670 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2563 identity=9881 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=11d28b34-8514-4928-92c3-076923b7c1ce] Description:}]" policyAddRequest=8746c97c-afcb-46a5-9ac0-c8dab6864c19 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=8746c97c-afcb-46a5-9ac0-c8dab6864c19 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.205 a02e3c27-6228-4f73-9b56-9d982931bc78 default }" containerID=d74533fec840185a26b8eeee58fb4d3f6c4f9e03ecd11ed48b56f3809a781d26 datapathConfiguration="&{false false false false false }" interface=lxcf726365264df k8sPodName=local-path-storage/helper-pod-create-pvc-b02ccad8-3439-4dfc-8a92-4e0584cd70f3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d74533fec8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b02ccad8-3439-4dfc-8a92-4e0584cd70f3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d74533fec8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b02ccad8-3439-4dfc-8a92-4e0584cd70f3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d74533fec8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 identity=16809 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b02ccad8-3439-4dfc-8a92-4e0584cd70f3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d74533fec8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 identity=16809 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b02ccad8-3439-4dfc-8a92-4e0584cd70f3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d74533fec8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3268 identity=16809 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b02ccad8-3439-4dfc-8a92-4e0584cd70f3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d74533fec8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3268 identity=16809 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b02ccad8-3439-4dfc-8a92-4e0584cd70f3 subsys=daemon level=info msg="Delete endpoint request" containerID=d74533fec8 endpointID=3268 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b02ccad8-3439-4dfc-8a92-4e0584cd70f3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d74533fec8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3268 identity=16809 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b02ccad8-3439-4dfc-8a92-4e0584cd70f3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 63a4b07f-4cd6-42ad-b43c-9cecabe411bb default }" containerID=1e8f7e279adcbc283247fef5c38d35dad107d95938fdff5a7580d03b1b36f65a datapathConfiguration="&{false false false false false }" interface=lxcbb1598653f57 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e8f7e279a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e8f7e279a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e8f7e279a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identity=11267 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1e8f7e279a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identity=11267 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e8f7e279a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=243 identity=11267 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e8f7e279a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=243 identity=11267 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=b34c5ad4-cf87-4b0f-b43d-3edfe356f52c] Description:}]" policyAddRequest=e952f133-693f-4dc8-b723-a754988c9484 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=e952f133-693f-4dc8-b723-a754988c9484 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.181 ab552e0c-3fe4-43cd-8899-333c0af84f1c default }" containerID=6cc4a556bd87fc664efab40be3d98c9b16dc1b207ad6937d902c5317cf4bda43 datapathConfiguration="&{false false false false false }" interface=lxcf56eb5f1a279 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6cc4a556bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 ipv4=10.0.0.181 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6cc4a556bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.181 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6cc4a556bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 identity=3475 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.181 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6cc4a556bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 identity=3475 ipv4=10.0.0.181 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6cc4a556bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1797 identity=3475 ipv4=10.0.0.181 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6cc4a556bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1797 identity=3475 ipv4=10.0.0.181 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008413705412095716 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.72 0fffe0f7-68d5-4270-b4ba-88e1bf3169d5 default }" containerID=5194d33ac81f0f58260f271e0cd2decad6ff095f1518e23e16d236f56b80e706 datapathConfiguration="&{false false false false false }" interface=lxc3bf1deeb0e11 k8sPodName=monitoring/node-feature-discovery-worker-jsb8v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5194d33ac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jsb8v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5194d33ac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jsb8v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5194d33ac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 identity=40134 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jsb8v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5194d33ac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 identity=40134 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jsb8v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5194d33ac8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1666 identity=40134 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jsb8v subsys=endpoint level=info msg="Successful endpoint creation" containerID=5194d33ac8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1666 identity=40134 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jsb8v subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.184 29820154-30b6-4f5c-bc80-7264b52924c1 default }" containerID=b4b09a69662c4ee39be48a8387268efc4ecd76aea2375315f3325861b18e43cd datapathConfiguration="&{false false false false false }" interface=lxcd7326dc533cb k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zxh8c labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.153 349dbcd7-5d3b-4ba9-ae4a-de473301f9b6 default }" containerID=668b5fc5393167fbd96ce9a810aa241998ee1e8fff042153c1d5b5f8e0ee8e7c datapathConfiguration="&{false false false false false }" interface=lxc607e6fc7860c k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-j9hwx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4b09a6966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zxh8c subsys=endpoint level=info msg="New endpoint" containerID=668b5fc539 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2686 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-j9hwx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4b09a6966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zxh8c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=668b5fc539 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2686 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-j9hwx subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4b09a6966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 identity=2088 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zxh8c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4b09a6966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 identity=2088 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zxh8c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=668b5fc539 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2686 identity=24769 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-j9hwx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=668b5fc539 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2686 identity=24769 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-j9hwx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4b09a6966 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=756 identity=2088 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zxh8c subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4b09a6966 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=756 identity=2088 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zxh8c subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=668b5fc539 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2686 identity=24769 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-j9hwx subsys=endpoint level=info msg="Successful endpoint creation" containerID=668b5fc539 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2686 identity=24769 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-j9hwx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.116 547e9979-a9bf-4ed5-a3bd-902048cfd04a default }" containerID=37e08387a0d85f398da6d28616528727736b77b341ea9c55aff9ef238ce0b009 datapathConfiguration="&{false false false false false }" interface=lxc70ee42926984 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7qnjc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37e08387a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3732 ipv4=10.0.0.116 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7qnjc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37e08387a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3732 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.116 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7qnjc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37e08387a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3732 identity=50142 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.116 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7qnjc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37e08387a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3732 identity=50142 ipv4=10.0.0.116 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7qnjc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37e08387a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3732 identity=50142 ipv4=10.0.0.116 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7qnjc subsys=endpoint level=info msg="Successful endpoint creation" containerID=37e08387a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3732 identity=50142 ipv4=10.0.0.116 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7qnjc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1791 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01791 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01791 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01791 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01791:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1791 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 457962d4-ff78-4dcd-8d4c-85328bed6845 default }" containerID=57221b82bc748a59a2a11290567db32f6b0567553e5b9f043443221f9ecae362 datapathConfiguration="&{false false false false false }" interface=lxc748b3f794c23 k8sPodName=monitoring/kube-prometheus-stack-admission-create-2lc78 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57221b82bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2lc78 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57221b82bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=ffebe73a-907f-4241-bbe1-a8f9e530db90,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ffebe73a-907f-4241-bbe1-a8f9e530db90,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2lc78 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=ffebe73a-907f-4241-bbe1-a8f9e530db90;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=ffebe73a-907f-4241-bbe1-a8f9e530db90;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57221b82bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 identity=45228 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=ffebe73a-907f-4241-bbe1-a8f9e530db90,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ffebe73a-907f-4241-bbe1-a8f9e530db90,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2lc78 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57221b82bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 identity=45228 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2lc78 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=57221b82bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1201 identity=45228 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2lc78 subsys=endpoint level=info msg="Successful endpoint creation" containerID=57221b82bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1201 identity=45228 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2lc78 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=57221b82bc endpointID=1201 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-2lc78 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=ffebe73a-907f-4241-bbe1-a8f9e530db90 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=ffebe73a-907f-4241-bbe1-a8f9e530db90 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=57221b82bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1201 identity=45228 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2lc78 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 1601265f-3e14-4a13-924e-9c984ff83cab default }" containerID=16a9f9c2df4c90f3b74ad08e24636bbd4abcc3c7d2c387c67edb62ee2f47b68d datapathConfiguration="&{false false false false false }" interface=lxc34ff728d72b2 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2xpvq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16a9f9c2df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2xpvq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16a9f9c2df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2xpvq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=16a9f9c2df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identity=29958 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2xpvq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16a9f9c2df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identity=29958 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2xpvq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.14 ca74f16a-0091-4951-af13-1f52c222119a default }" containerID=4069e63c2ffc3734c32d83f6c8a1dbaabd7ff3e268f74279368c028a10e4831f datapathConfiguration="&{false false false false false }" interface=lxc93ac112a8231 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4kv62 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4069e63c2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4kv62 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4069e63c2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4kv62 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.66 e82028ba-90b5-416f-bc81-65df0d87faae default }" containerID=05f4ef4af36dc0fb1d8a0804a87de742a8ff1080b2c13c72f7add74e18e93bcb datapathConfiguration="&{false false false false false }" interface=lxc033b177f8e74 k8sPodName=monitoring/kube-prometheus-stack-grafana-86b667599c-bcxk7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05f4ef4af3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-86b667599c-bcxk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05f4ef4af3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-86b667599c-bcxk7 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4069e63c2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identity=45459 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4kv62 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4069e63c2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identity=45459 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4kv62 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05f4ef4af3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 identity=1451 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-86b667599c-bcxk7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05f4ef4af3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 identity=1451 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-86b667599c-bcxk7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=16a9f9c2df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2295 identity=29958 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2xpvq subsys=endpoint level=info msg="Successful endpoint creation" containerID=16a9f9c2df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2295 identity=29958 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-2xpvq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4069e63c2f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=185 identity=45459 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4kv62 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4069e63c2f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=185 identity=45459 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4kv62 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=05f4ef4af3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=372 identity=1451 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-86b667599c-bcxk7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=05f4ef4af3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=372 identity=1451 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-86b667599c-bcxk7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.207 562a388b-8c49-40fb-880e-efd96c21f37a default }" containerID=9d91aaf306658189bdc9c5e508bdb78a41985ac33a0780b49db37cd1e29f8b2c datapathConfiguration="&{false false false false false }" interface=lxc76ef3002cff9 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xqkg8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d91aaf306 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xqkg8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d91aaf306 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=9b322578-c2b2-42e3-8a40-2b3d3660e5c7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9b322578-c2b2-42e3-8a40-2b3d3660e5c7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xqkg8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=9b322578-c2b2-42e3-8a40-2b3d3660e5c7;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=9b322578-c2b2-42e3-8a40-2b3d3660e5c7;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d91aaf306 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 identity=11554 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=9b322578-c2b2-42e3-8a40-2b3d3660e5c7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9b322578-c2b2-42e3-8a40-2b3d3660e5c7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xqkg8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d91aaf306 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 identity=11554 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xqkg8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d91aaf306 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1024 identity=11554 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xqkg8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d91aaf306 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1024 identity=11554 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xqkg8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9d91aaf306 endpointID=1024 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-xqkg8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=9b322578-c2b2-42e3-8a40-2b3d3660e5c7 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=9b322578-c2b2-42e3-8a40-2b3d3660e5c7 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=9d91aaf306 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1024 identity=11554 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xqkg8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 94b16ef4-cdf1-4f21-921f-347ddcf9e2d8 default }" containerID=245d119bcb4d42f3be79bfca710927c3f3e637daec0475a25cd22b5e356863a2 datapathConfiguration="&{false false false false false }" interface=lxca214791508d7 k8sPodName=local-path-storage/helper-pod-create-pvc-c37c2be1-9d51-4ce7-acc9-95b49ac9df42 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=245d119bcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c37c2be1-9d51-4ce7-acc9-95b49ac9df42 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=245d119bcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c37c2be1-9d51-4ce7-acc9-95b49ac9df42 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=245d119bcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 identity=16809 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c37c2be1-9d51-4ce7-acc9-95b49ac9df42 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=245d119bcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 identity=16809 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c37c2be1-9d51-4ce7-acc9-95b49ac9df42 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=245d119bcb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1126 identity=16809 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c37c2be1-9d51-4ce7-acc9-95b49ac9df42 subsys=endpoint level=info msg="Successful endpoint creation" containerID=245d119bcb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1126 identity=16809 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c37c2be1-9d51-4ce7-acc9-95b49ac9df42 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.54 62d4b747-83cd-448f-9a32-b53f104624f2 default }" containerID=2932af021f179acf38eca2b4805b7208aa5dc469d3c54751f9a321f45ac84cfb datapathConfiguration="&{false false false false false }" interface=lxcfd63a4921a98 k8sPodName=local-path-storage/helper-pod-create-pvc-7a2c9a52-ecdd-44fd-9dda-c1b45c4165a2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2932af021f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=862 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a2c9a52-ecdd-44fd-9dda-c1b45c4165a2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2932af021f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=862 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a2c9a52-ecdd-44fd-9dda-c1b45c4165a2 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2932af021f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=862 identity=16809 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a2c9a52-ecdd-44fd-9dda-c1b45c4165a2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2932af021f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=862 identity=16809 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a2c9a52-ecdd-44fd-9dda-c1b45c4165a2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2932af021f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=862 identity=16809 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a2c9a52-ecdd-44fd-9dda-c1b45c4165a2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2932af021f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=862 identity=16809 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a2c9a52-ecdd-44fd-9dda-c1b45c4165a2 subsys=daemon level=info msg="Delete endpoint request" containerID=245d119bcb endpointID=1126 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c37c2be1-9d51-4ce7-acc9-95b49ac9df42 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=2932af021f endpointID=862 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7a2c9a52-ecdd-44fd-9dda-c1b45c4165a2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=245d119bcb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1126 identity=16809 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c37c2be1-9d51-4ce7-acc9-95b49ac9df42 subsys=endpoint level=info msg="Removed endpoint" containerID=2932af021f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=862 identity=16809 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a2c9a52-ecdd-44fd-9dda-c1b45c4165a2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 a0e6c50f-0c41-472b-a75f-07956487d671 default }" containerID=d271713c3fc87d8ba89265cefff92136be7e4e1ec8d562d0e92104ccb2ec399b datapathConfiguration="&{false false false false false }" interface=lxc858f2a116f7a k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d271713c3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1458 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d271713c3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1458 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d271713c3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1458 identity=41313 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d271713c3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1458 identity=41313 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d271713c3f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1458 identity=41313 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d271713c3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1458 identity=41313 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.111 c093d0ba-8c17-4fdf-829f-2f79f224459b default }" containerID=adb42f35208f54b2d4651be36dec4bff23386550e140fb694c22eff4cea5c367 datapathConfiguration="&{false false false false false }" interface=lxce36229f9e080 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=adb42f3520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=adb42f3520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=adb42f3520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 identity=56094 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=adb42f3520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1990 identity=56094 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=adb42f3520 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1990 identity=56094 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=adb42f3520 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1990 identity=56094 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.97 1df8b02a-0f11-4a65-b293-a62fd52e15cc default }" containerID=70dac9d354e2c16b5657bfb99f6a7671a548bf56af0851456bb2895807a7e605 datapathConfiguration="&{false false false false false }" interface=lxcc117f37e6ad6 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70dac9d354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3607 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70dac9d354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3607 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.5 3862da54-18dd-4996-b8c9-4eb2e253ce0a default }" containerID=e343ee5afa3777de2bee6205465e3e970836d86aeea1028d35e9fdeac1b64522 datapathConfiguration="&{false false false false false }" interface=lxc42c37dab0911 k8sPodName=monitoring/loki-gateway-cf54cb88c-5zpng labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e343ee5afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5zpng subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e343ee5afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5zpng subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70dac9d354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3607 identity=35680 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70dac9d354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3607 identity=35680 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e343ee5afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identity=19630 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5zpng oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e343ee5afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identity=19630 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5zpng subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 80e11e45-3180-413e-bbc3-acf3b6e95012 default }" containerID=9828fbb6c6462a7ed24f961667b96f1d50a2d9ca1e72505fa8e32c0369540ca7 datapathConfiguration="&{false false false false false }" interface=lxc15faa710b077 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9828fbb6c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9828fbb6c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9828fbb6c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identity=19561 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9828fbb6c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identity=19561 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=70dac9d354 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3607 identity=35680 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=70dac9d354 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3607 identity=35680 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e343ee5afa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=483 identity=19630 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5zpng subsys=endpoint level=info msg="Successful endpoint creation" containerID=e343ee5afa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=483 identity=19630 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5zpng subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9828fbb6c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=94 identity=19561 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9828fbb6c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=94 identity=19561 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.244 247b71b9-b7cb-41ef-b28b-f5d6cff665c2 default }" containerID=c0ca4ef6e34801e86b0aa6320fe36ea967fcbdf64ce60d089227d057ae5a8acb datapathConfiguration="&{false false false false false }" interface=lxc41e74c3feac0 k8sPodName=local-path-storage/helper-pod-create-pvc-fe003a30-5881-4123-911a-84eb474ba998 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0ca4ef6e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe003a30-5881-4123-911a-84eb474ba998 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0ca4ef6e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe003a30-5881-4123-911a-84eb474ba998 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0ca4ef6e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 identity=16809 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe003a30-5881-4123-911a-84eb474ba998 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0ca4ef6e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 identity=16809 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe003a30-5881-4123-911a-84eb474ba998 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c0ca4ef6e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1128 identity=16809 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe003a30-5881-4123-911a-84eb474ba998 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0ca4ef6e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1128 identity=16809 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe003a30-5881-4123-911a-84eb474ba998 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.154 3e327a57-b6ca-4f57-9360-8ca639847e92 default }" containerID=99f07e3a3725342641ae62715f74c0aff456978dc980f9b1e288f81eb4df72cc datapathConfiguration="&{false false false false false }" interface=lxc3d45ded04492 k8sPodName=monitoring/vector-xs29m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99f07e3a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/vector-xs29m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99f07e3a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/vector-xs29m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99f07e3a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identity=16607 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/vector-xs29m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99f07e3a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identity=16607 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/vector-xs29m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=99f07e3a37 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=429 identity=16607 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/vector-xs29m subsys=endpoint level=info msg="Successful endpoint creation" containerID=99f07e3a37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=429 identity=16607 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/vector-xs29m subsys=daemon level=info msg="Delete endpoint request" containerID=c0ca4ef6e3 endpointID=1128 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fe003a30-5881-4123-911a-84eb474ba998 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c0ca4ef6e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1128 identity=16809 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fe003a30-5881-4123-911a-84eb474ba998 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 c3ff15c4-aabe-4c61-a5d9-5e3a5c283d82 default }" containerID=911192000a556cf53807cb951dbdbc115684c0556c0406269428049da92f63ec datapathConfiguration="&{false false false false false }" interface=lxca614c79857a3 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=911192000a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=911192000a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=911192000a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=911192000a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 identity=9550 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=911192000a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 identity=9550 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=911192000a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=175 identity=9550 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=911192000a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=175 identity=9550 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.112 69944147-5147-4703-88b0-c48dc9d85631 default }" containerID=c6e4a93f7d24559d41f407498cbbcca2880a29d4af807560944076719fb119d7 datapathConfiguration="&{false false false false false }" interface=lxc69909fd5b683 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7cm8q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6e4a93f7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7cm8q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6e4a93f7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7cm8q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6e4a93f7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=48680 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7cm8q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6e4a93f7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=48680 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7cm8q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c6e4a93f7d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=295 identity=48680 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7cm8q subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6e4a93f7d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=295 identity=48680 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7cm8q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.143 804449b1-fc85-419f-bdfc-7affd94792e2 default }" containerID=23c013c846b4c4c799cae0cb8ba00644fcf0cc7f7118b0d6368e0bbf64f8c7b6 datapathConfiguration="&{false false false false false }" interface=lxca3554af5f6b3 k8sPodName=openstack/memcached-memcached-6479589586-pznrg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23c013c846 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pznrg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23c013c846 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pznrg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=23c013c846 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 identity=15084 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pznrg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23c013c846 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 identity=15084 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pznrg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23c013c846 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=601 identity=15084 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pznrg subsys=endpoint level=info msg="Successful endpoint creation" containerID=23c013c846 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=601 identity=15084 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pznrg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.253 453a4aa0-f6e1-42e8-9d5c-678442d9e4f7 default }" containerID=171bbb873a268840bc9ac6bef796f5fa2f08fb7d1773de9c2614f0f0b2ccecd7 datapathConfiguration="&{false false false false false }" interface=lxc908dc86f57e0 k8sPodName=local-path-storage/helper-pod-create-pvc-969401c4-44d4-4e05-9ed2-a92a6a3573d0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=171bbb873a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-969401c4-44d4-4e05-9ed2-a92a6a3573d0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=171bbb873a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-969401c4-44d4-4e05-9ed2-a92a6a3573d0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=171bbb873a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=16809 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-969401c4-44d4-4e05-9ed2-a92a6a3573d0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=171bbb873a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=16809 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-969401c4-44d4-4e05-9ed2-a92a6a3573d0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=171bbb873a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=880 identity=16809 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-969401c4-44d4-4e05-9ed2-a92a6a3573d0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=171bbb873a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=880 identity=16809 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-969401c4-44d4-4e05-9ed2-a92a6a3573d0 subsys=daemon level=info msg="Delete endpoint request" containerID=171bbb873a endpointID=880 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-969401c4-44d4-4e05-9ed2-a92a6a3573d0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=171bbb873a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=880 identity=16809 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-969401c4-44d4-4e05-9ed2-a92a6a3573d0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 17415a79-2d2b-41e0-845d-5fdea6195f7b default }" containerID=467bca55913bf515d04b815d6ccb384bfc805a4e176b284a709fc0fa27856797 datapathConfiguration="&{false false false false false }" interface=lxca42485ae36b9 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=467bca5591 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1555 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=467bca5591 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1555 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=467bca5591 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1555 identity=43119 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=467bca5591 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1555 identity=43119 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=467bca5591 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1555 identity=43119 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=467bca5591 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1555 identity=43119 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.28 5293a614-67e7-461c-aea7-947ce72b4cd2 default }" containerID=d9f1e8b75773897cf78cb5f98d587b1ed4fa2109d3fad6596ee3ac367c137a0c datapathConfiguration="&{false false false false false }" interface=lxcae29d09d27b0 k8sPodName=openstack/keystone-api-678c8cdbbb-7j966 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9f1e8b757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-api-678c8cdbbb-7j966 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9f1e8b757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-api-678c8cdbbb-7j966 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d9f1e8b757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 identity=25969 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-api-678c8cdbbb-7j966 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9f1e8b757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 identity=25969 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-api-678c8cdbbb-7j966 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 de783a54-c42f-43d1-93a7-6bcd47e37aae default }" containerID=98e694ca7785b40c9b5f1fe36557915bc4c95524fccf4987b435ae7de8d609d1 datapathConfiguration="&{false false false false false }" interface=lxcb4198f7314bc k8sPodName=openstack/keystone-credential-setup-fv5cp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98e694ca77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-credential-setup-fv5cp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98e694ca77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f6d65d71-5d96-441b-9ccb-34c5b61f6eb4,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=f6d65d71-5d96-441b-9ccb-34c5b61f6eb4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-credential-setup-fv5cp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f6d65d71-5d96-441b-9ccb-34c5b61f6eb4;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=f6d65d71-5d96-441b-9ccb-34c5b61f6eb4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98e694ca77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 identity=5901 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f6d65d71-5d96-441b-9ccb-34c5b61f6eb4,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=f6d65d71-5d96-441b-9ccb-34c5b61f6eb4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-credential-setup-fv5cp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98e694ca77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 identity=5901 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-credential-setup-fv5cp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d9f1e8b757 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=495 identity=25969 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-api-678c8cdbbb-7j966 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9f1e8b757 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=495 identity=25969 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-api-678c8cdbbb-7j966 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=98e694ca77 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1834 identity=5901 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-credential-setup-fv5cp subsys=endpoint level=info msg="Successful endpoint creation" containerID=98e694ca77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1834 identity=5901 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-credential-setup-fv5cp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=98e694ca77 endpointID=1834 k8sNamespace=openstack k8sPodName=keystone-credential-setup-fv5cp subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f6d65d71-5d96-441b-9ccb-34c5b61f6eb4 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=f6d65d71-5d96-441b-9ccb-34c5b61f6eb4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=98e694ca77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1834 identity=5901 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-credential-setup-fv5cp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 1b1f5f3d-934d-431d-baf6-bc0f88ac3ebc default }" containerID=2120d294b293e5d3fec21b2e21c1c9c51df4ef3d52fc6d18e3a7b1c198e460d4 datapathConfiguration="&{false false false false false }" interface=lxc92fa4eeac4e5 k8sPodName=openstack/keystone-db-init-btw7v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2120d294b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-db-init-btw7v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2120d294b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6a2a2d00-88b9-496f-8216-677446caac33,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=6a2a2d00-88b9-496f-8216-677446caac33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-db-init-btw7v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2120d294b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-db-init-btw7v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6a2a2d00-88b9-496f-8216-677446caac33;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=6a2a2d00-88b9-496f-8216-677446caac33;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2120d294b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 identity=62787 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6a2a2d00-88b9-496f-8216-677446caac33,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=6a2a2d00-88b9-496f-8216-677446caac33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-db-init-btw7v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2120d294b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 identity=62787 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-db-init-btw7v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2120d294b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1302 identity=62787 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-db-init-btw7v subsys=endpoint level=info msg="Successful endpoint creation" containerID=2120d294b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1302 identity=62787 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-db-init-btw7v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2120d294b2 endpointID=1302 k8sNamespace=openstack k8sPodName=keystone-db-init-btw7v subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6a2a2d00-88b9-496f-8216-677446caac33 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=6a2a2d00-88b9-496f-8216-677446caac33 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2120d294b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1302 identity=62787 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-db-init-btw7v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 c7b1a900-ee9c-409e-b540-8de989db1a72 default }" containerID=10c281979e4a8ef551d8b3c63af859782c891d7e3f06e01b6a5ddee882795fe8 datapathConfiguration="&{false false false false false }" interface=lxc07b864773c85 k8sPodName=openstack/keystone-fernet-setup-xkrl2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10c281979e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-fernet-setup-xkrl2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10c281979e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cd10ba47-edab-4cd2-adb9-8bb909e89d2c,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=cd10ba47-edab-4cd2-adb9-8bb909e89d2c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-fernet-setup-xkrl2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=cd10ba47-edab-4cd2-adb9-8bb909e89d2c;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=cd10ba47-edab-4cd2-adb9-8bb909e89d2c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10c281979e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 identity=52676 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cd10ba47-edab-4cd2-adb9-8bb909e89d2c,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=cd10ba47-edab-4cd2-adb9-8bb909e89d2c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-fernet-setup-xkrl2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=10c281979e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1974 identity=52676 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-fernet-setup-xkrl2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=10c281979e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1974 identity=52676 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-fernet-setup-xkrl2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=10c281979e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1974 identity=52676 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-fernet-setup-xkrl2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=10c281979e endpointID=1974 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-xkrl2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=cd10ba47-edab-4cd2-adb9-8bb909e89d2c k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=cd10ba47-edab-4cd2-adb9-8bb909e89d2c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=10c281979e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1974 identity=52676 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-fernet-setup-xkrl2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 a09751cd-3417-4ed1-91ad-752e05dc7e93 default }" containerID=906b4d85f274bd784d3fced2566daf79d5a47274a4422d526b928af32fa936f7 datapathConfiguration="&{false false false false false }" interface=lxcc7bb9086f7fc k8sPodName=openstack/keystone-db-sync-qhkl8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=906b4d85f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-db-sync-qhkl8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=906b4d85f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4a803d17-bef4-484c-89cd-9514a551e90e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=4a803d17-bef4-484c-89cd-9514a551e90e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-db-sync-qhkl8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4a803d17-bef4-484c-89cd-9514a551e90e;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=4a803d17-bef4-484c-89cd-9514a551e90e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=906b4d85f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 identity=10617 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4a803d17-bef4-484c-89cd-9514a551e90e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=4a803d17-bef4-484c-89cd-9514a551e90e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-db-sync-qhkl8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=906b4d85f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=833 identity=10617 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-db-sync-qhkl8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=906b4d85f2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=833 identity=10617 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-db-sync-qhkl8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=906b4d85f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=833 identity=10617 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-db-sync-qhkl8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=906b4d85f2 endpointID=833 k8sNamespace=openstack k8sPodName=keystone-db-sync-qhkl8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4a803d17-bef4-484c-89cd-9514a551e90e k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=4a803d17-bef4-484c-89cd-9514a551e90e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=906b4d85f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=833 identity=10617 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-db-sync-qhkl8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 0b772b91-9611-42d7-a07f-7d5350b2336a default }" containerID=de3fe75207dcbef863ed1855d2366b941a116cf3ecab932631cc93ac0a54058f datapathConfiguration="&{false false false false false }" interface=lxcdf053e417329 k8sPodName=openstack/keystone-rabbit-init-62mdg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de3fe75207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-rabbit-init-62mdg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de3fe75207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2fde882e-79c6-4165-92a9-10313116616b,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2fde882e-79c6-4165-92a9-10313116616b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-rabbit-init-62mdg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2fde882e-79c6-4165-92a9-10313116616b;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2fde882e-79c6-4165-92a9-10313116616b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de3fe75207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identity=60504 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2fde882e-79c6-4165-92a9-10313116616b,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2fde882e-79c6-4165-92a9-10313116616b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-rabbit-init-62mdg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=de3fe75207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identity=60504 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-rabbit-init-62mdg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de3fe75207 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=636 identity=60504 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-rabbit-init-62mdg subsys=endpoint level=info msg="Successful endpoint creation" containerID=de3fe75207 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=636 identity=60504 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-rabbit-init-62mdg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=de3fe75207 endpointID=636 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-62mdg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2fde882e-79c6-4165-92a9-10313116616b k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2fde882e-79c6-4165-92a9-10313116616b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=de3fe75207 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=636 identity=60504 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-rabbit-init-62mdg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 124a7276-8408-43ff-ac77-69bdba2683e4 default }" containerID=11b0fe87a21bcafcea32ce4ff41e1e0caff61bee737de71b14cd937830212a31 datapathConfiguration="&{false false false false false }" interface=lxc574bd738160d k8sPodName=openstack/keystone-domain-manage-rjl9w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11b0fe87a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-domain-manage-rjl9w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11b0fe87a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f8be14dc-8dbd-4c6b-8497-24b197d9cddf,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=f8be14dc-8dbd-4c6b-8497-24b197d9cddf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-domain-manage-rjl9w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f8be14dc-8dbd-4c6b-8497-24b197d9cddf;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=f8be14dc-8dbd-4c6b-8497-24b197d9cddf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11b0fe87a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 identity=20344 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f8be14dc-8dbd-4c6b-8497-24b197d9cddf,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=f8be14dc-8dbd-4c6b-8497-24b197d9cddf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-domain-manage-rjl9w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11b0fe87a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 identity=20344 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-domain-manage-rjl9w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=11b0fe87a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2799 identity=20344 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-domain-manage-rjl9w subsys=endpoint level=info msg="Successful endpoint creation" containerID=11b0fe87a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2799 identity=20344 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-domain-manage-rjl9w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=11b0fe87a2 endpointID=2799 k8sNamespace=openstack k8sPodName=keystone-domain-manage-rjl9w subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f8be14dc-8dbd-4c6b-8497-24b197d9cddf k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=f8be14dc-8dbd-4c6b-8497-24b197d9cddf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=11b0fe87a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2799 identity=20344 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-domain-manage-rjl9w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 d5aa7105-7a91-448e-83c3-66877814528a default }" containerID=ccc25689d9ab86a113b66312fad1ce84b243ca6dc04a2414bf9a113799231a99 datapathConfiguration="&{false false false false false }" interface=lxce38321de7a7f k8sPodName=openstack/keystone-bootstrap-qn5db labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccc25689d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-qn5db subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccc25689d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f04a41ad-6adf-42eb-ae06-937239d897b8,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f04a41ad-6adf-42eb-ae06-937239d897b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-qn5db subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f04a41ad-6adf-42eb-ae06-937239d897b8;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=f04a41ad-6adf-42eb-ae06-937239d897b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccc25689d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identity=9677 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f04a41ad-6adf-42eb-ae06-937239d897b8,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f04a41ad-6adf-42eb-ae06-937239d897b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-qn5db oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ccc25689d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identity=9677 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-qn5db subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ccc25689d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1213 identity=9677 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-qn5db subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccc25689d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1213 identity=9677 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-qn5db subsys=daemon level=info msg="Delete endpoint request" containerID=ccc25689d9 endpointID=1213 k8sNamespace=openstack k8sPodName=keystone-bootstrap-qn5db subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f04a41ad-6adf-42eb-ae06-937239d897b8 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=f04a41ad-6adf-42eb-ae06-937239d897b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ccc25689d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1213 identity=9677 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-qn5db subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 9180c460-76d1-464c-90d2-383732255254 default }" containerID=1d57a93a7f5d879b7c9efa99624e1203152af45056d595f0233ac141ef8383d2 datapathConfiguration="&{false false false false false }" interface=lxc9b0a179da406 k8sPodName=local-path-storage/helper-pod-create-pvc-c6eb9456-6c71-49f6-83c5-46b9cbdbf5c6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d57a93a7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1115 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c6eb9456-6c71-49f6-83c5-46b9cbdbf5c6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d57a93a7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1115 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c6eb9456-6c71-49f6-83c5-46b9cbdbf5c6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d57a93a7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1115 identity=16809 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c6eb9456-6c71-49f6-83c5-46b9cbdbf5c6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d57a93a7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1115 identity=16809 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c6eb9456-6c71-49f6-83c5-46b9cbdbf5c6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d57a93a7f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1115 identity=16809 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c6eb9456-6c71-49f6-83c5-46b9cbdbf5c6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d57a93a7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1115 identity=16809 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c6eb9456-6c71-49f6-83c5-46b9cbdbf5c6 subsys=daemon level=info msg="Delete endpoint request" containerID=1d57a93a7f endpointID=1115 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c6eb9456-6c71-49f6-83c5-46b9cbdbf5c6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1d57a93a7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1115 identity=16809 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c6eb9456-6c71-49f6-83c5-46b9cbdbf5c6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 e438d475-540b-4487-b5f6-080be6d928de default }" containerID=dd3a3e03d022f5ad1bdb8d153bae548b7e6e979e654680757b2d4314c8066c28 datapathConfiguration="&{false false false false false }" interface=lxc5a29d1c1b9a5 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd3a3e03d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4003 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd3a3e03d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4003 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd3a3e03d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4003 identity=31891 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd3a3e03d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4003 identity=31891 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dd3a3e03d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4003 identity=31891 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd3a3e03d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4003 identity=31891 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.034111353091563296 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.176 738722c2-3b53-45f3-a85b-20cbfe10ba0c default }" containerID=7265c51265e89d11c20e8232e1d589cdf5a8b59924d82fb6cf90a1700c251673 datapathConfiguration="&{false false false false false }" interface=lxc592ed1164b86 k8sPodName=openstack/barbican-api-7549d6d78c-gjt6b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7265c51265 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-7549d6d78c-gjt6b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7265c51265 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-7549d6d78c-gjt6b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7265c51265 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-7549d6d78c-gjt6b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7265c51265 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 identity=10227 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-7549d6d78c-gjt6b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7265c51265 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 identity=10227 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-7549d6d78c-gjt6b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7265c51265 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1297 identity=10227 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-7549d6d78c-gjt6b subsys=endpoint level=info msg="Successful endpoint creation" containerID=7265c51265 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1297 identity=10227 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-7549d6d78c-gjt6b subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.57 952f6c7b-dc05-402c-a73a-8501190d5a87 default }" containerID=5562ba1fa4cbb2a8ae48e1a2ce33d4538e2a307af8535abdd8a093cd55020606 datapathConfiguration="&{false false false false false }" interface=lxca5d29ec05ca2 k8sPodName=openstack/barbican-db-init-bhk6n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5562ba1fa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-db-init-bhk6n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5562ba1fa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a9cfaf80-a7c1-4334-a591-95021b6afe4f,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a9cfaf80-a7c1-4334-a591-95021b6afe4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-db-init-bhk6n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a9cfaf80-a7c1-4334-a591-95021b6afe4f;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=a9cfaf80-a7c1-4334-a591-95021b6afe4f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5562ba1fa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 identity=64226 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a9cfaf80-a7c1-4334-a591-95021b6afe4f,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a9cfaf80-a7c1-4334-a591-95021b6afe4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-db-init-bhk6n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5562ba1fa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 identity=64226 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-db-init-bhk6n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5562ba1fa4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=779 identity=64226 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-db-init-bhk6n subsys=endpoint level=info msg="Successful endpoint creation" containerID=5562ba1fa4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=779 identity=64226 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-db-init-bhk6n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5562ba1fa4 endpointID=779 k8sNamespace=openstack k8sPodName=barbican-db-init-bhk6n subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a9cfaf80-a7c1-4334-a591-95021b6afe4f k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=a9cfaf80-a7c1-4334-a591-95021b6afe4f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5562ba1fa4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=779 identity=64226 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-db-init-bhk6n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 bb7d50a0-533f-46b7-81c3-b755852be488 default }" containerID=e9419a65117ba238ca81037a435b8fd68386cfab86049fc971f62ab04d42833f datapathConfiguration="&{false false false false false }" interface=lxc77d17395a041 k8sPodName=openstack/barbican-db-sync-8cz9m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9419a6511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1437 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-db-sync-8cz9m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9419a6511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1437 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=87d1e6ee-e245-4f55-b569-938e593966a4,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=87d1e6ee-e245-4f55-b569-938e593966a4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-db-sync-8cz9m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=87d1e6ee-e245-4f55-b569-938e593966a4;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=87d1e6ee-e245-4f55-b569-938e593966a4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e9419a6511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1437 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-db-sync-8cz9m line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e9419a6511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1437 identity=22007 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=87d1e6ee-e245-4f55-b569-938e593966a4,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=87d1e6ee-e245-4f55-b569-938e593966a4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-db-sync-8cz9m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9419a6511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1437 identity=22007 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-db-sync-8cz9m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9419a6511 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1437 identity=22007 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-db-sync-8cz9m subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9419a6511 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1437 identity=22007 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-db-sync-8cz9m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e9419a6511 endpointID=1437 k8sNamespace=openstack k8sPodName=barbican-db-sync-8cz9m subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=87d1e6ee-e245-4f55-b569-938e593966a4 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=87d1e6ee-e245-4f55-b569-938e593966a4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e9419a6511 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1437 identity=22007 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-db-sync-8cz9m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 66dcf596-853c-4fea-9374-dccfb86d3901 default }" containerID=940d24c9256f4e10c13e0126606fc89d129e389edbc52da3d42bf39acce608ab datapathConfiguration="&{false false false false false }" interface=lxcdc89e6459b1d k8sPodName=openstack/barbican-rabbit-init-nk9t4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=940d24c925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2926 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-nk9t4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=940d24c925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2926 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=832dd69e-16d6-49d2-bcac-101f2c8a81df,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=832dd69e-16d6-49d2-bcac-101f2c8a81df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-nk9t4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=832dd69e-16d6-49d2-bcac-101f2c8a81df;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=832dd69e-16d6-49d2-bcac-101f2c8a81df;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=940d24c925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2926 identity=3781 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=832dd69e-16d6-49d2-bcac-101f2c8a81df,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=832dd69e-16d6-49d2-bcac-101f2c8a81df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-nk9t4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=940d24c925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2926 identity=3781 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-nk9t4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=940d24c925 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2926 identity=3781 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-nk9t4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=940d24c925 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2926 identity=3781 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-nk9t4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=940d24c925 endpointID=2926 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-nk9t4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=832dd69e-16d6-49d2-bcac-101f2c8a81df k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=832dd69e-16d6-49d2-bcac-101f2c8a81df k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=940d24c925 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2926 identity=3781 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-nk9t4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 438e6844-6a93-4111-b892-a3ee94530ef4 default }" containerID=fbf64a95ec83b4be506611e541e5de6d1b7cadedba2bd2dac65f93bee52eed0e datapathConfiguration="&{false false false false false }" interface=lxc6d4cb96b83fe k8sPodName=openstack/barbican-ks-service-k9rxf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbf64a95ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-k9rxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbf64a95ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9a51d5c7-5fe7-4be7-ab7f-1642d092b62b,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=9a51d5c7-5fe7-4be7-ab7f-1642d092b62b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-k9rxf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9a51d5c7-5fe7-4be7-ab7f-1642d092b62b;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=9a51d5c7-5fe7-4be7-ab7f-1642d092b62b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=fbf64a95ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identity=2091 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9a51d5c7-5fe7-4be7-ab7f-1642d092b62b,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=9a51d5c7-5fe7-4be7-ab7f-1642d092b62b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-k9rxf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fbf64a95ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identity=2091 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-k9rxf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fbf64a95ec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=934 identity=2091 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-k9rxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbf64a95ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=934 identity=2091 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-k9rxf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fbf64a95ec endpointID=934 k8sNamespace=openstack k8sPodName=barbican-ks-service-k9rxf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9a51d5c7-5fe7-4be7-ab7f-1642d092b62b k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=9a51d5c7-5fe7-4be7-ab7f-1642d092b62b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fbf64a95ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=934 identity=2091 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-k9rxf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 12df0fa0-b181-4816-8280-7d8330381dd5 default }" containerID=0bff1aa51410847ed6acd1d64a9feb1c1c03ed2110e1881dc0921eabcefbbb99 datapathConfiguration="&{false false false false false }" interface=lxccac37fc598e8 k8sPodName=openstack/barbican-ks-endpoints-rpgdk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bff1aa514 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rpgdk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0bff1aa514 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=305bfa00-c1ff-4420-9943-d32b63ede2cc,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=305bfa00-c1ff-4420-9943-d32b63ede2cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rpgdk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=305bfa00-c1ff-4420-9943-d32b63ede2cc;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=305bfa00-c1ff-4420-9943-d32b63ede2cc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0bff1aa514 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 identity=5941 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=305bfa00-c1ff-4420-9943-d32b63ede2cc,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=305bfa00-c1ff-4420-9943-d32b63ede2cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rpgdk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0bff1aa514 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 identity=5941 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rpgdk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0bff1aa514 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=219 identity=5941 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rpgdk subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bff1aa514 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=219 identity=5941 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rpgdk subsys=daemon level=info msg="Delete endpoint request" containerID=0bff1aa514 endpointID=219 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-rpgdk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=305bfa00-c1ff-4420-9943-d32b63ede2cc k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=305bfa00-c1ff-4420-9943-d32b63ede2cc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0bff1aa514 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=219 identity=5941 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rpgdk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 0240a045-d3cd-434b-b6a5-1c1bb050e9ad default }" containerID=7c294e44b03323585cfdeb2c9c0dfd201da5f6befface6b545088ac04dbba6f1 datapathConfiguration="&{false false false false false }" interface=lxc9eb4211da9fe k8sPodName=openstack/barbican-ks-user-nhp24 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c294e44b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1985 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-ks-user-nhp24 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c294e44b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1985 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2c700cff-28d5-4117-9eb8-96a61d167282,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=2c700cff-28d5-4117-9eb8-96a61d167282,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-ks-user-nhp24 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2c700cff-28d5-4117-9eb8-96a61d167282;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=2c700cff-28d5-4117-9eb8-96a61d167282;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7c294e44b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1985 identity=5125 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2c700cff-28d5-4117-9eb8-96a61d167282,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=2c700cff-28d5-4117-9eb8-96a61d167282,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-ks-user-nhp24 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c294e44b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1985 identity=5125 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-ks-user-nhp24 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c294e44b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1985 identity=5125 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-ks-user-nhp24 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c294e44b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1985 identity=5125 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-ks-user-nhp24 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7c294e44b0 endpointID=1985 k8sNamespace=openstack k8sPodName=barbican-ks-user-nhp24 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2c700cff-28d5-4117-9eb8-96a61d167282 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=2c700cff-28d5-4117-9eb8-96a61d167282 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7c294e44b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1985 identity=5125 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-ks-user-nhp24 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.36 1fa0601a-3383-4385-b24a-f4435e8c51d9 default }" containerID=1ad1e8229ae18616f7abf0188df505970fdd0b91a63c5941a484a92bd7764c86 datapathConfiguration="&{false false false false false }" interface=lxcccb1ada60f25 k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-pr4dh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ad1e8229a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1402 ipv4=10.0.0.36 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-pr4dh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ad1e8229a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1402 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.36 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-pr4dh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ad1e8229a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1402 identity=45045 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.36 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-pr4dh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ad1e8229a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1402 identity=45045 ipv4=10.0.0.36 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-pr4dh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ad1e8229a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1402 identity=45045 ipv4=10.0.0.36 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-pr4dh subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ad1e8229a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1402 identity=45045 ipv4=10.0.0.36 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-pr4dh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.175 9cf56c88-ae1c-4602-b52b-1354611b4fe8 default }" containerID=51c5ac2bbfd95da9f2b1af2a8d1e803cee01aea5ab0dabd8a063f6c864e92c15 datapathConfiguration="&{false false false false false }" interface=lxc20ff635de672 k8sPodName=openstack/rook-ceph-detect-version-hbk8r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51c5ac2bbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3491 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hbk8r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51c5ac2bbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3491 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=e7e61ec5-258f-4bf6-a775-b0d5f11851a5,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=e7e61ec5-258f-4bf6-a775-b0d5f11851a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hbk8r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=e7e61ec5-258f-4bf6-a775-b0d5f11851a5;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=e7e61ec5-258f-4bf6-a775-b0d5f11851a5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51c5ac2bbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3491 identity=24234 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=e7e61ec5-258f-4bf6-a775-b0d5f11851a5,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=e7e61ec5-258f-4bf6-a775-b0d5f11851a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hbk8r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51c5ac2bbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3491 identity=24234 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hbk8r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51c5ac2bbf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3491 identity=24234 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hbk8r subsys=endpoint level=info msg="Successful endpoint creation" containerID=51c5ac2bbf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3491 identity=24234 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hbk8r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=51c5ac2bbf endpointID=3491 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-hbk8r subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=e7e61ec5-258f-4bf6-a775-b0d5f11851a5 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=e7e61ec5-258f-4bf6-a775-b0d5f11851a5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=51c5ac2bbf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3491 identity=24234 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hbk8r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 08864ee0-10bd-441a-b1cd-7933bfd8f6a0 default }" containerID=ca0c3d66236687a7bd6b2058dc79fb48689eb4b9e8dc2e7a0601cd9a1d054a79 datapathConfiguration="&{false false false false false }" interface=lxce59be31fdff0 k8sPodName=openstack/ceph-object-controller-detect-version-29vx5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca0c3d6623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1679 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-29vx5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca0c3d6623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1679 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=ed117457-e95f-46b4-a808-d4ed5dfbaf95,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=ed117457-e95f-46b4-a808-d4ed5dfbaf95,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-29vx5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=ed117457-e95f-46b4-a808-d4ed5dfbaf95;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=ed117457-e95f-46b4-a808-d4ed5dfbaf95;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ca0c3d6623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1679 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-29vx5 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ca0c3d6623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1679 identity=2863 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=ed117457-e95f-46b4-a808-d4ed5dfbaf95,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=ed117457-e95f-46b4-a808-d4ed5dfbaf95,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-29vx5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca0c3d6623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1679 identity=2863 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-29vx5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca0c3d6623 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1679 identity=2863 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-29vx5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca0c3d6623 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1679 identity=2863 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-29vx5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ca0c3d6623 endpointID=1679 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-29vx5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=ed117457-e95f-46b4-a808-d4ed5dfbaf95 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=ed117457-e95f-46b4-a808-d4ed5dfbaf95 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=ca0c3d6623 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1679 identity=2863 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-29vx5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 e5137898-9a52-4d45-8209-724d7b67a369 default }" containerID=b47dd6f5c34b7d4520fa8170a35228de7f7db30314037b3b81658b7acf4bb353 datapathConfiguration="&{false false false false false }" interface=lxc7fbadf5bad76 k8sPodName=local-path-storage/helper-pod-create-pvc-66e9f91b-de85-479b-a207-79efbe2b3c4a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b47dd6f5c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66e9f91b-de85-479b-a207-79efbe2b3c4a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b47dd6f5c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66e9f91b-de85-479b-a207-79efbe2b3c4a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b47dd6f5c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 identity=16809 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66e9f91b-de85-479b-a207-79efbe2b3c4a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b47dd6f5c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 identity=16809 ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66e9f91b-de85-479b-a207-79efbe2b3c4a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b47dd6f5c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=205 identity=16809 ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66e9f91b-de85-479b-a207-79efbe2b3c4a subsys=endpoint level=info msg="Successful endpoint creation" containerID=b47dd6f5c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=205 identity=16809 ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66e9f91b-de85-479b-a207-79efbe2b3c4a subsys=daemon level=info msg="Delete endpoint request" containerID=b47dd6f5c3 endpointID=205 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-66e9f91b-de85-479b-a207-79efbe2b3c4a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b47dd6f5c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=205 identity=16809 ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66e9f91b-de85-479b-a207-79efbe2b3c4a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 7f08a92d-ad96-489e-95a9-44d1ef48febf default }" containerID=e176a839c8d1a6d20deaababee80b3b9f3ceae8625555efca93e4db7f0c3897e datapathConfiguration="&{false false false false false }" interface=lxc7962186c2d02 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e176a839c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=809 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e176a839c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=809 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e176a839c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=809 identity=10082 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e176a839c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=809 identity=10082 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e176a839c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=809 identity=10082 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e176a839c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=809 identity=10082 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 86f37e16-4f3f-49ad-a590-c14be43e74f4 default }" containerID=18ccb074f2d8d8e129e95a9a658780d843230e1fe799631a57f76636fcb65baa datapathConfiguration="&{false false false false false }" interface=lxca5b85142d945 k8sPodName=openstack/glance-db-init-klgmt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18ccb074f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1955 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-init-klgmt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18ccb074f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1955 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2f2e2b2b-d7f8-4f7d-aa26-2ac12067634f,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=2f2e2b2b-d7f8-4f7d-aa26-2ac12067634f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-init-klgmt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2f2e2b2b-d7f8-4f7d-aa26-2ac12067634f;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=2f2e2b2b-d7f8-4f7d-aa26-2ac12067634f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18ccb074f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1955 identity=60623 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2f2e2b2b-d7f8-4f7d-aa26-2ac12067634f,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=2f2e2b2b-d7f8-4f7d-aa26-2ac12067634f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-init-klgmt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18ccb074f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1955 identity=60623 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-init-klgmt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=18ccb074f2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1955 identity=60623 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-init-klgmt subsys=endpoint level=info msg="Successful endpoint creation" containerID=18ccb074f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1955 identity=60623 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-init-klgmt subsys=daemon level=info msg="Delete endpoint request" containerID=18ccb074f2 endpointID=1955 k8sNamespace=openstack k8sPodName=glance-db-init-klgmt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2f2e2b2b-d7f8-4f7d-aa26-2ac12067634f k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=2f2e2b2b-d7f8-4f7d-aa26-2ac12067634f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=18ccb074f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1955 identity=60623 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-db-init-klgmt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 03044cc1-b487-40c0-9efa-7825e2732c2b default }" containerID=7894ee1a1261f430b17bf87093e92481d649ab8d80bf0b65cc774e3167ed59f5 datapathConfiguration="&{false false false false false }" interface=lxcf3861b67c0a3 k8sPodName=openstack/glance-db-sync-42bkg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7894ee1a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2584 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-42bkg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7894ee1a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2584 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f7809610-3ac6-4028-847a-0dd68f40cbd8,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=f7809610-3ac6-4028-847a-0dd68f40cbd8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-42bkg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f7809610-3ac6-4028-847a-0dd68f40cbd8;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=f7809610-3ac6-4028-847a-0dd68f40cbd8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7894ee1a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2584 identity=41086 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f7809610-3ac6-4028-847a-0dd68f40cbd8,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=f7809610-3ac6-4028-847a-0dd68f40cbd8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-42bkg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7894ee1a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2584 identity=41086 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-42bkg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7894ee1a12 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2584 identity=41086 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-42bkg subsys=endpoint level=info msg="Successful endpoint creation" containerID=7894ee1a12 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2584 identity=41086 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-42bkg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7894ee1a12 endpointID=2584 k8sNamespace=openstack k8sPodName=glance-db-sync-42bkg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f7809610-3ac6-4028-847a-0dd68f40cbd8 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=f7809610-3ac6-4028-847a-0dd68f40cbd8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7894ee1a12 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2584 identity=41086 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-42bkg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 16c8e0bc-9338-4c15-8add-e19cf8cb0160 default }" containerID=4788f2b3bfacc860a086e9af6a3d9baae39705f93087b7d75245510a8670a521 datapathConfiguration="&{false false false false false }" interface=lxcca114a99c524 k8sPodName=openstack/glance-rabbit-init-bwmjf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4788f2b3bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2644 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-rabbit-init-bwmjf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4788f2b3bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2644 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=98fcb499-1b51-4dec-b3fc-52b2a69766f6,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=98fcb499-1b51-4dec-b3fc-52b2a69766f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-rabbit-init-bwmjf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4788f2b3bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2644 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-rabbit-init-bwmjf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=98fcb499-1b51-4dec-b3fc-52b2a69766f6;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=98fcb499-1b51-4dec-b3fc-52b2a69766f6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4788f2b3bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2644 identity=14689 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=98fcb499-1b51-4dec-b3fc-52b2a69766f6,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=98fcb499-1b51-4dec-b3fc-52b2a69766f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-rabbit-init-bwmjf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4788f2b3bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2644 identity=14689 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-rabbit-init-bwmjf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4788f2b3bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2644 identity=14689 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-rabbit-init-bwmjf subsys=endpoint level=info msg="Successful endpoint creation" containerID=4788f2b3bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2644 identity=14689 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-rabbit-init-bwmjf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.216 564b3d3a-6201-4953-a6de-793af71b63bb default }" containerID=a7f3e3bde6c9586d152c548f9438cff75a3592ac9ebdbd3cd3abdccf9e60a4a0 datapathConfiguration="&{false false false false false }" interface=lxcbf9f00144186 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gpcnp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7f3e3bde6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gpcnp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7f3e3bde6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gpcnp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a7f3e3bde6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gpcnp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7f3e3bde6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identity=37769 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gpcnp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7f3e3bde6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identity=37769 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gpcnp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a7f3e3bde6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1322 identity=37769 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gpcnp subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7f3e3bde6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1322 identity=37769 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gpcnp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.239 318d6961-c5f8-4b45-ad57-e9f5ea6d3686 default }" containerID=519442a9fc6c14a3d4cda23fb7950913d680a1af1c2f1c71133e8c834c6ed3bf datapathConfiguration="&{false false false false false }" interface=lxc635e16b6fce0 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5j8hr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=519442a9fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2518 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5j8hr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=519442a9fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2518 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5j8hr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=519442a9fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2518 identity=38817 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5j8hr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=519442a9fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2518 identity=38817 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5j8hr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=519442a9fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2518 identity=38817 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5j8hr subsys=endpoint level=info msg="Successful endpoint creation" containerID=519442a9fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2518 identity=38817 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5j8hr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4788f2b3bf endpointID=2644 k8sNamespace=openstack k8sPodName=glance-rabbit-init-bwmjf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=98fcb499-1b51-4dec-b3fc-52b2a69766f6 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=98fcb499-1b51-4dec-b3fc-52b2a69766f6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4788f2b3bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2644 identity=14689 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-rabbit-init-bwmjf subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.38 8e222182-1a83-402d-b0d6-6a1610004dab default }" containerID=511e57e6343b90040922691d86d1d0621a01e9b5600ca6aa10e3398b2db5380b datapathConfiguration="&{false false false false false }" interface=lxc3d10a130168c k8sPodName=openstack/glance-ks-service-n8ztt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=511e57e634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/glance-ks-service-n8ztt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=511e57e634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=325bd511-0bb1-4480-bdc9-053ee04cd530,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=325bd511-0bb1-4480-bdc9-053ee04cd530,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/glance-ks-service-n8ztt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=325bd511-0bb1-4480-bdc9-053ee04cd530;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=325bd511-0bb1-4480-bdc9-053ee04cd530;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=511e57e634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 identity=4496 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=325bd511-0bb1-4480-bdc9-053ee04cd530,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=325bd511-0bb1-4480-bdc9-053ee04cd530,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/glance-ks-service-n8ztt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=511e57e634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 identity=4496 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/glance-ks-service-n8ztt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=511e57e634 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1503 identity=4496 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/glance-ks-service-n8ztt subsys=endpoint level=info msg="Successful endpoint creation" containerID=511e57e634 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1503 identity=4496 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/glance-ks-service-n8ztt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=511e57e634 endpointID=1503 k8sNamespace=openstack k8sPodName=glance-ks-service-n8ztt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=325bd511-0bb1-4480-bdc9-053ee04cd530 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=325bd511-0bb1-4480-bdc9-053ee04cd530 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=511e57e634 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1503 identity=4496 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/glance-ks-service-n8ztt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 b8deaa37-14d4-485c-8eab-ab56b893d04c default }" containerID=325afd945f343eac145b5d6027bc7d11107693a50a95b62b625106ff58363968 datapathConfiguration="&{false false false false false }" interface=lxca2f7f383f98c k8sPodName=openstack/glance-ks-endpoints-jpv57 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=325afd945f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-ks-endpoints-jpv57 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=325afd945f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=835264a4-8724-4507-be18-9ab180cd27c2,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=835264a4-8724-4507-be18-9ab180cd27c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-ks-endpoints-jpv57 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=325afd945f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-ks-endpoints-jpv57 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=835264a4-8724-4507-be18-9ab180cd27c2;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=835264a4-8724-4507-be18-9ab180cd27c2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=325afd945f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 identity=43049 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=835264a4-8724-4507-be18-9ab180cd27c2,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=835264a4-8724-4507-be18-9ab180cd27c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-ks-endpoints-jpv57 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=325afd945f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 identity=43049 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-ks-endpoints-jpv57 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=325afd945f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=67 identity=43049 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-ks-endpoints-jpv57 subsys=endpoint level=info msg="Successful endpoint creation" containerID=325afd945f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=67 identity=43049 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-ks-endpoints-jpv57 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.113 dec3328d-3c75-4da9-9122-a6fec506d5fa default }" containerID=2858ca2febfbfb45bfa38b35740e4d5b60905e578904b8ab8e8f8beb8114b833 datapathConfiguration="&{false false false false false }" interface=lxc51d3f92b5c89 k8sPodName=openstack/ceph-object-controller-detect-version-bxv76 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2858ca2feb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2108 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bxv76 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2858ca2feb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2108 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=1e7b553d-143c-429b-8fc9-cb546ef8528a,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=1e7b553d-143c-429b-8fc9-cb546ef8528a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bxv76 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=1e7b553d-143c-429b-8fc9-cb546ef8528a;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=1e7b553d-143c-429b-8fc9-cb546ef8528a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2858ca2feb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2108 identity=5063 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=1e7b553d-143c-429b-8fc9-cb546ef8528a,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=1e7b553d-143c-429b-8fc9-cb546ef8528a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bxv76 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2858ca2feb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2108 identity=5063 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bxv76 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2858ca2feb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2108 identity=5063 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bxv76 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2858ca2feb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2108 identity=5063 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bxv76 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2858ca2feb endpointID=2108 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-bxv76 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=1e7b553d-143c-429b-8fc9-cb546ef8528a k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=1e7b553d-143c-429b-8fc9-cb546ef8528a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=2858ca2feb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2108 identity=5063 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bxv76 subsys=endpoint level=info msg="Delete endpoint request" containerID=325afd945f endpointID=67 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-jpv57 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=835264a4-8724-4507-be18-9ab180cd27c2 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=835264a4-8724-4507-be18-9ab180cd27c2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=325afd945f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=67 identity=43049 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-ks-endpoints-jpv57 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 e6d1acb4-6a27-495d-ade5-56bbd5eea5cd default }" containerID=d04bcb66d81282252f9229f01c8fdea08636e8ca7bf0604cd81c0ed71fccc88f datapathConfiguration="&{false false false false false }" interface=lxc576793f2dec1 k8sPodName=openstack/glance-ks-user-b22s6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d04bcb66d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-user-b22s6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d04bcb66d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3eb553d7-da3f-44db-87c7-da75f6727127,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=3eb553d7-da3f-44db-87c7-da75f6727127,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-user-b22s6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3eb553d7-da3f-44db-87c7-da75f6727127;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=3eb553d7-da3f-44db-87c7-da75f6727127;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d04bcb66d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-user-b22s6 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d04bcb66d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identity=16898 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3eb553d7-da3f-44db-87c7-da75f6727127,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=3eb553d7-da3f-44db-87c7-da75f6727127,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-user-b22s6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d04bcb66d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identity=16898 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-user-b22s6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d04bcb66d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=154 identity=16898 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-user-b22s6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d04bcb66d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=154 identity=16898 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-user-b22s6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d04bcb66d8 endpointID=154 k8sNamespace=openstack k8sPodName=glance-ks-user-b22s6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3eb553d7-da3f-44db-87c7-da75f6727127 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=3eb553d7-da3f-44db-87c7-da75f6727127 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d04bcb66d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=154 identity=16898 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-ks-user-b22s6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 4e19dec8-f0e1-42d0-997d-4d99ae7abaed default }" containerID=9f52ef7991f22b2019e2ea5903d4e742720cd365bdb9e24384a80c164de9434a datapathConfiguration="&{false false false false false }" interface=lxc66bf2360f7ab k8sPodName=openstack/glance-metadefs-load-cbksm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f52ef7991 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4001 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-metadefs-load-cbksm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f52ef7991 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4001 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a2ee56b1-1bbb-4317-802b-40fde245a37b,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a2ee56b1-1bbb-4317-802b-40fde245a37b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-metadefs-load-cbksm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a2ee56b1-1bbb-4317-802b-40fde245a37b;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=a2ee56b1-1bbb-4317-802b-40fde245a37b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f52ef7991 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4001 identity=13171 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a2ee56b1-1bbb-4317-802b-40fde245a37b,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a2ee56b1-1bbb-4317-802b-40fde245a37b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-metadefs-load-cbksm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f52ef7991 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4001 identity=13171 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-metadefs-load-cbksm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9f52ef7991 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4001 identity=13171 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-metadefs-load-cbksm subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f52ef7991 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4001 identity=13171 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-metadefs-load-cbksm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f52ef7991 endpointID=4001 k8sNamespace=openstack k8sPodName=glance-metadefs-load-cbksm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a2ee56b1-1bbb-4317-802b-40fde245a37b k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=a2ee56b1-1bbb-4317-802b-40fde245a37b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9f52ef7991 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4001 identity=13171 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-metadefs-load-cbksm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 ee2cf81e-9582-46b3-9fa1-5ad19be6f23e default }" containerID=7b1ce8539020b433e428750826bc596ccb3c723a50456275bc5ede481e0b509e datapathConfiguration="&{false false false false false }" interface=lxcde48a9c1c77a k8sPodName=openstack/glance-storage-init-hfg4r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b1ce85390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3944 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-storage-init-hfg4r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b1ce85390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3944 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6df598b4-d972-4eef-a3a6-f57c85a01b54,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=6df598b4-d972-4eef-a3a6-f57c85a01b54,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-storage-init-hfg4r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7b1ce85390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3944 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-storage-init-hfg4r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6df598b4-d972-4eef-a3a6-f57c85a01b54;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=6df598b4-d972-4eef-a3a6-f57c85a01b54;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b1ce85390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3944 identity=13656 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6df598b4-d972-4eef-a3a6-f57c85a01b54,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=6df598b4-d972-4eef-a3a6-f57c85a01b54,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-storage-init-hfg4r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b1ce85390 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3944 identity=13656 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-storage-init-hfg4r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b1ce85390 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3944 identity=13656 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-storage-init-hfg4r subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b1ce85390 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3944 identity=13656 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-storage-init-hfg4r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7b1ce85390 endpointID=3944 k8sNamespace=openstack k8sPodName=glance-storage-init-hfg4r subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6df598b4-d972-4eef-a3a6-f57c85a01b54 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=6df598b4-d972-4eef-a3a6-f57c85a01b54 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7b1ce85390 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3944 identity=13656 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-storage-init-hfg4r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 ad2815f5-1711-4202-9198-2e2584bd3af0 default }" containerID=4e97eff521cd3e354e50e4459bad361292951ab87cfc820284fa16d992ba605d datapathConfiguration="&{false false false false false }" interface=lxcf056f88326ed k8sPodName=openstack/glance-api-64dcd694c4-dsknn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e97eff521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-api-64dcd694c4-dsknn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e97eff521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-api-64dcd694c4-dsknn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e97eff521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=23490 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-api-64dcd694c4-dsknn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e97eff521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=23490 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-api-64dcd694c4-dsknn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e97eff521 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=606 identity=23490 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-api-64dcd694c4-dsknn subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e97eff521 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=606 identity=23490 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-api-64dcd694c4-dsknn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.162 f73b3ffa-4f98-472d-ba40-a2998cd69c31 default }" containerID=f3365f96ac909185818f77739cb8060e2729874b58cf8abf76b7db17de3a9a0a datapathConfiguration="&{false false false false false }" interface=lxcf4a286aa1589 k8sPodName=openstack/staffeln-api-6fd5ff66fd-2kfth labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3365f96ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-api-6fd5ff66fd-2kfth subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3365f96ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-api-6fd5ff66fd-2kfth subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3365f96ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identity=23876 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-api-6fd5ff66fd-2kfth oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3365f96ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identity=23876 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-api-6fd5ff66fd-2kfth subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.64 56ad554c-766a-4b30-aa17-eda3e9d32299 default }" containerID=ddff95fd8fe64a96493613fffebb29e3516fb0d32f05aa2656300d2e444ecc61 datapathConfiguration="&{false false false false false }" interface=lxcd7ba0bf84c4b k8sPodName=openstack/staffeln-conductor-6d9686c845-7b2tg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ddff95fd8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2441 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-conductor-6d9686c845-7b2tg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ddff95fd8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2441 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-conductor-6d9686c845-7b2tg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ddff95fd8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2441 identity=3411 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-conductor-6d9686c845-7b2tg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ddff95fd8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2441 identity=3411 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-conductor-6d9686c845-7b2tg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 f652b474-c0bb-4214-8746-b235aca1d8f1 default }" containerID=6e61e532b03f7c4d9382d1e2328a8d179533b135c1f8bd884f950dc5578916d8 datapathConfiguration="&{false false false false false }" interface=lxcb532aa45cfab k8sPodName=openstack/staffeln-db-init-jsfmh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e61e532b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/staffeln-db-init-jsfmh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e61e532b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1325689a-0194-4e8b-82d6-4c480a544a3f,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=1325689a-0194-4e8b-82d6-4c480a544a3f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/staffeln-db-init-jsfmh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=1325689a-0194-4e8b-82d6-4c480a544a3f;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=1325689a-0194-4e8b-82d6-4c480a544a3f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e61e532b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 identity=33462 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1325689a-0194-4e8b-82d6-4c480a544a3f,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=1325689a-0194-4e8b-82d6-4c480a544a3f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/staffeln-db-init-jsfmh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e61e532b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 identity=33462 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/staffeln-db-init-jsfmh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f3365f96ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=164 identity=23876 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-api-6fd5ff66fd-2kfth subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3365f96ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=164 identity=23876 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/staffeln-api-6fd5ff66fd-2kfth subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ddff95fd8f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2441 identity=3411 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-conductor-6d9686c845-7b2tg subsys=endpoint level=info msg="Successful endpoint creation" containerID=ddff95fd8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2441 identity=3411 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-conductor-6d9686c845-7b2tg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6e61e532b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1416 identity=33462 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/staffeln-db-init-jsfmh subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e61e532b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1416 identity=33462 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/staffeln-db-init-jsfmh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6e61e532b0 endpointID=1416 k8sNamespace=openstack k8sPodName=staffeln-db-init-jsfmh subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=1325689a-0194-4e8b-82d6-4c480a544a3f k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=1325689a-0194-4e8b-82d6-4c480a544a3f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=6e61e532b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1416 identity=33462 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/staffeln-db-init-jsfmh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 455c56fb-84f1-40f8-b174-f8d4e2317eda default }" containerID=c489fbb58be121ed826b7edf7e6926dfea3115dbdf830bd37caf5e56a9d09dcf datapathConfiguration="&{false false false false false }" interface=lxcf05b659c6eec k8sPodName=openstack/staffeln-db-sync-k8zjl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c489fbb58b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-db-sync-k8zjl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c489fbb58b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=fe2ee86e-efd3-4e56-8990-05ebc00af015,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=fe2ee86e-efd3-4e56-8990-05ebc00af015,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-db-sync-k8zjl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=fe2ee86e-efd3-4e56-8990-05ebc00af015;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=fe2ee86e-efd3-4e56-8990-05ebc00af015;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c489fbb58b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=9357 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=fe2ee86e-efd3-4e56-8990-05ebc00af015,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=fe2ee86e-efd3-4e56-8990-05ebc00af015,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-db-sync-k8zjl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c489fbb58b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=9357 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-db-sync-k8zjl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c489fbb58b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=169 identity=9357 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-db-sync-k8zjl subsys=endpoint level=info msg="Successful endpoint creation" containerID=c489fbb58b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=169 identity=9357 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-db-sync-k8zjl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager