level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="851.92µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="42.901µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="742.587µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="8.85µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=103.20047ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="10.42µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="56.051µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="121.043µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="92.522µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="136.483µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="457.47µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.72µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.617111ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=10.674219ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="58.861µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="60.001µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="319.368µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="81.662µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="71.962µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=99.653419ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="104.263µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="51.421µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.19µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.73.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.405285ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="5.871µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.022341ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="6.15µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.461028ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.37µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="4.92µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.75µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.24µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.261µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="25.181µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="11.651µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="68.462µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="255.515µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.83µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.2µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="180.284µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.053654ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.256839ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.11µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="10.941µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.73 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.73 ipAddr.ipv6="" k8sNodeIP=199.19.213.73 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.73" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.18" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.73" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.73} {CiliumInternalIP 10.0.0.18}] 10.0.0.0/24 [] [] 10.0.0.222 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:44879" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.494694708s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Start hook executed" duration="21.621µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="6.641µs" function="*job.group.Start" subsys=hive level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="36.051µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="7.75µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.643222375s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=310.159571ms file-path=/var/run/cilium/state/templates/986ea5873741797b977184ae986a9433e57b5fb3c5675a9b7be4eb701b78e7db/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=976 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2571 ipv4=10.0.0.222 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2571 identityLabels="reserved:health" ipv4=10.0.0.222 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2571 identity=4 identityLabels="reserved:health" ipv4=10.0.0.222 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.107137637s file-path=/var/run/cilium/state/templates/4df0a2dfd1dadf8e38322867049de38853b25f44646d3c11c5ec31b4d0ebb0c7/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2571 identity=4 ipv4=10.0.0.222 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 b8bb298f-6011-44c9-8c41-e11891fcb1f9 default }" containerID=3430eed84963c3bd5dcbba5375f97e284b77cf8e83fd4a6b4f8d18adf85943a6 datapathConfiguration="&{false false false false false }" interface=lxc6122d07d08d3 k8sPodName=kube-system/coredns-7c96b6546b-n4pgl labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.199 74234187-468c-4a8a-8bb9-c33de653ed6e default }" containerID=9251f2927c5d2f60976450ba6023cf794d590da7ae34a8dcd1f6628dc73399ae datapathConfiguration="&{false false false false false }" interface=lxcfadb60b5f6cf k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bwcbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3430eed849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 ipv4=10.0.0.142 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n4pgl subsys=endpoint level=info msg="New endpoint" containerID=9251f2927c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bwcbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3430eed849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.142 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n4pgl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=9251f2927c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=185ca4f3-90cf-46ab-95eb-14fe80a22fd4,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=185ca4f3-90cf-46ab-95eb-14fe80a22fd4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bwcbb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3430eed849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.142 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n4pgl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9251f2927c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bwcbb line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3430eed849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identity=50134 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.142 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n4pgl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3430eed849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identity=50134 ipv4=10.0.0.142 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n4pgl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=185ca4f3-90cf-46ab-95eb-14fe80a22fd4;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=185ca4f3-90cf-46ab-95eb-14fe80a22fd4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9251f2927c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 identity=32633 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=185ca4f3-90cf-46ab-95eb-14fe80a22fd4,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=185ca4f3-90cf-46ab-95eb-14fe80a22fd4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bwcbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9251f2927c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 identity=32633 ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bwcbb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3430eed849 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1339 identity=50134 ipv4=10.0.0.142 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n4pgl subsys=endpoint level=info msg="Successful endpoint creation" containerID=3430eed849 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1339 identity=50134 ipv4=10.0.0.142 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n4pgl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9251f2927c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=433 identity=32633 ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bwcbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=9251f2927c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=433 identity=32633 ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bwcbb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9251f2927c endpointID=433 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-bwcbb subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=185ca4f3-90cf-46ab-95eb-14fe80a22fd4 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=185ca4f3-90cf-46ab-95eb-14fe80a22fd4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=9251f2927c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=433 identity=32633 ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bwcbb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 73de4ad1-e394-40c3-bd3e-ced9588382ea default }" containerID=ccd3e7eaa386515ae28f16264f999598b964072cf57a6c47fb0afa2a4444ef86 datapathConfiguration="&{false false false false false }" interface=lxc558a4c764a49 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qb5b4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccd3e7eaa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qb5b4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccd3e7eaa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qb5b4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccd3e7eaa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identity=23300 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qb5b4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ccd3e7eaa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identity=23300 ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qb5b4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ccd3e7eaa3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=688 identity=23300 ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qb5b4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccd3e7eaa3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=688 identity=23300 ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-qb5b4 subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=976 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00976 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00976 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00976 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00976:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=976 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 7b98d533-b07b-4369-bd4e-e7f76f2952ad default }" containerID=b8a9d094184742d3e19e9c5a64e0f8e1122df43fffaa01d4568c56ba70fdd4e8 datapathConfiguration="&{false false false false false }" interface=lxc2d3244696479 k8sPodName=kube-system/coredns-67659f764b-24kqm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8a9d09418 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-24kqm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8a9d09418 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-24kqm subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b8a9d09418 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 identity=50134 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-24kqm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8a9d09418 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 identity=50134 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-24kqm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8a9d09418 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2133 identity=50134 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-24kqm subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8a9d09418 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2133 identity=50134 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-24kqm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.141 bf24cf30-ca73-44f3-a4af-492b038bd7b2 default }" containerID=126f88a354aecb220be6eab9a0f574b34c839a018c4f34dc837c51b290d25290 datapathConfiguration="&{false false false false false }" interface=lxcad79c859fa7f k8sPodName=kube-system/coredns-67659f764b-wdkjk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=126f88a354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3100 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-67659f764b-wdkjk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=126f88a354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3100 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-67659f764b-wdkjk subsys=endpoint level=info msg="Identity of endpoint changed" containerID=126f88a354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3100 identity=50134 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-67659f764b-wdkjk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=126f88a354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3100 identity=50134 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-67659f764b-wdkjk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=126f88a354 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3100 identity=50134 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-67659f764b-wdkjk subsys=endpoint level=info msg="Successful endpoint creation" containerID=126f88a354 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3100 identity=50134 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-67659f764b-wdkjk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.175 c98a3f1b-d380-4082-bf40-f58430e0d355 default }" containerID=67b3c43a571398240ab58379b144d17e7a4cfd28a032fc97e7231137aa4be235 datapathConfiguration="&{false false false false false }" interface=lxcc10ff5492d08 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-kmh5c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67b3c43a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-kmh5c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67b3c43a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-kmh5c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=67b3c43a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-kmh5c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67b3c43a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identity=46853 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-kmh5c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67b3c43a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identity=46853 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-kmh5c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67b3c43a57 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1623 identity=46853 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-kmh5c subsys=endpoint level=info msg="Successful endpoint creation" containerID=67b3c43a57 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1623 identity=46853 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-kmh5c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3430eed849 endpointID=1339 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-n4pgl subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=3430eed849 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1339 identity=50134 ipv4=10.0.0.142 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n4pgl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 a6440f39-7ac6-4121-a58b-2595c43132a8 default }" containerID=c711ac1894a0df868c3b91590c4e42862d7414a368ffe56be10870728d752f12 datapathConfiguration="&{false false false false false }" interface=lxc0faaa087247f k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7mhv5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c711ac1894 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3927 ipv4=10.0.0.113 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7mhv5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c711ac1894 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3927 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.113 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7mhv5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c711ac1894 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3927 identity=20235 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.113 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7mhv5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c711ac1894 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3927 identity=20235 ipv4=10.0.0.113 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7mhv5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.248 c0d42c19-1bc9-4b9e-a88d-5ec8d5df9245 default }" containerID=35c7b807acee4049381b4376ddb48dc4df88113af89e1ea2e5cefa023f767c4c datapathConfiguration="&{false false false false false }" interface=lxccdd2c842d11a k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hsbbs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35c7b807ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hsbbs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35c7b807ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hsbbs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35c7b807ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identity=30454 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hsbbs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35c7b807ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identity=30454 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hsbbs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 773f8a00-914f-4d0b-8331-bf677365a206 default }" containerID=df0998bcf292cf009c37f738a53d1cb632f21c4169aff5f90adf6ecc09f4cfbf datapathConfiguration="&{false false false false false }" interface=lxcab8fd1cacb9d k8sPodName=cert-manager/cert-manager-75c4c745bc-6pszj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df0998bcf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6pszj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df0998bcf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6pszj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df0998bcf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identity=8675 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6pszj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df0998bcf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identity=8675 ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6pszj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c711ac1894 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3927 identity=20235 ipv4=10.0.0.113 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7mhv5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c711ac1894 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3927 identity=20235 ipv4=10.0.0.113 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7mhv5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=35c7b807ac datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=524 identity=30454 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hsbbs subsys=endpoint level=info msg="Successful endpoint creation" containerID=35c7b807ac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=524 identity=30454 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hsbbs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=df0998bcf2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1319 identity=8675 ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6pszj subsys=endpoint level=info msg="Successful endpoint creation" containerID=df0998bcf2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1319 identity=8675 ipv4=10.0.0.68 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6pszj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.253 9f84b2c6-6a35-4b31-8c0c-9f4c259c2403 default }" containerID=d81dc85cd52476bdc6bc7ce0677f8d12819bbb57cfb5c8a2a391a2aeb8243e7d datapathConfiguration="&{false false false false false }" interface=lxcb2745e7fd59f k8sPodName=cert-manager/cert-manager-startupapicheck-w6qqg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d81dc85cd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2171 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-w6qqg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d81dc85cd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2171 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=fbb225a1-38da-4e68-b18e-5a54e9708753,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=fbb225a1-38da-4e68-b18e-5a54e9708753,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-w6qqg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=fbb225a1-38da-4e68-b18e-5a54e9708753;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=fbb225a1-38da-4e68-b18e-5a54e9708753;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d81dc85cd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2171 identity=41030 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=fbb225a1-38da-4e68-b18e-5a54e9708753,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=fbb225a1-38da-4e68-b18e-5a54e9708753,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-w6qqg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d81dc85cd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2171 identity=41030 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-w6qqg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d81dc85cd5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2171 identity=41030 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-w6qqg subsys=endpoint level=info msg="Successful endpoint creation" containerID=d81dc85cd5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2171 identity=41030 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-w6qqg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d81dc85cd5 endpointID=2171 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-w6qqg subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=fbb225a1-38da-4e68-b18e-5a54e9708753 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=fbb225a1-38da-4e68-b18e-5a54e9708753 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=d81dc85cd5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2171 identity=41030 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-w6qqg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 9dd0b227-2914-4067-9d0c-9a8ec4841aa9 default }" containerID=a5e2255656f726ac84bbfaf158c795f4635e8479404e246d71a465844091490b datapathConfiguration="&{false false false false false }" interface=lxcba7b5247cccb k8sPodName=ingress-nginx/ingress-nginx-admission-create-4sv6b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5e2255656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3778 ipv4=10.0.0.209 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4sv6b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5e2255656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3778 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a1f77c12-f0e8-4ee5-925a-f483cf5ec95a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=a1f77c12-f0e8-4ee5-925a-f483cf5ec95a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.209 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4sv6b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=a1f77c12-f0e8-4ee5-925a-f483cf5ec95a;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=a1f77c12-f0e8-4ee5-925a-f483cf5ec95a;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5e2255656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3778 identity=22376 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a1f77c12-f0e8-4ee5-925a-f483cf5ec95a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=a1f77c12-f0e8-4ee5-925a-f483cf5ec95a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.209 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4sv6b oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a5e2255656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3778 identity=22376 ipv4=10.0.0.209 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4sv6b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5e2255656 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3778 identity=22376 ipv4=10.0.0.209 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4sv6b subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5e2255656 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3778 identity=22376 ipv4=10.0.0.209 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4sv6b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a5e2255656 endpointID=3778 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-4sv6b subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=a1f77c12-f0e8-4ee5-925a-f483cf5ec95a k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=a1f77c12-f0e8-4ee5-925a-f483cf5ec95a k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=a5e2255656 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3778 identity=22376 ipv4=10.0.0.209 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4sv6b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 38d6e58c-22ba-4791-a12c-4d0328ca3344 default }" containerID=e4ca059376b21c891509b41dcbcd43c9fe81114c854fdae35aa60debf1bd6490 datapathConfiguration="&{false false false false false }" interface=lxc0fa896d0b521 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bqrhd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4ca059376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bqrhd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4ca059376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bqrhd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e4ca059376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bqrhd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4ca059376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identity=3998 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bqrhd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4ca059376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identity=3998 ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bqrhd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4ca059376 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=101 identity=3998 ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bqrhd subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4ca059376 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=101 identity=3998 ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bqrhd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.65 02c3d4fc-e770-4853-b8f2-3e208145aee4 default }" containerID=e37f767eff15819bd8a063fd892d426d3addd65bcf2ff6e4f8c0eee91e6202aa datapathConfiguration="&{false false false false false }" interface=lxc51b8715dc940 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dg8kv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e37f767eff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 ipv4=10.0.0.65 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dg8kv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e37f767eff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=28582516-aee4-4439-9614-f22a9cd9dc99,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=28582516-aee4-4439-9614-f22a9cd9dc99,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.65 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dg8kv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=28582516-aee4-4439-9614-f22a9cd9dc99;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=28582516-aee4-4439-9614-f22a9cd9dc99;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e37f767eff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=17296 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=28582516-aee4-4439-9614-f22a9cd9dc99,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=28582516-aee4-4439-9614-f22a9cd9dc99,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.65 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dg8kv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e37f767eff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=17296 ipv4=10.0.0.65 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dg8kv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e37f767eff datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=126 identity=17296 ipv4=10.0.0.65 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dg8kv subsys=endpoint level=info msg="Successful endpoint creation" containerID=e37f767eff datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=126 identity=17296 ipv4=10.0.0.65 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dg8kv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e37f767eff endpointID=126 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-dg8kv subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=28582516-aee4-4439-9614-f22a9cd9dc99 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=28582516-aee4-4439-9614-f22a9cd9dc99 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=e37f767eff datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=126 identity=17296 ipv4=10.0.0.65 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dg8kv subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=1650dc99-c150-4bce-9f66-dd028e121045] Description:}]" policyAddRequest=94a0f7e2-7ff9-4077-9ac8-9e661e5d76ab subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=94a0f7e2-7ff9-4077-9ac8-9e661e5d76ab policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=fa83f71f-4a3d-4918-977f-6b3658d6d385] Description:}]" policyAddRequest=b735d96d-ef26-45a6-9986-fab393aed1e2 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=b735d96d-ef26-45a6-9986-fab393aed1e2 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.108 bf102dea-202c-4105-a6e9-ce0b7aca77e2 default }" containerID=f1bebd2c71696c49d5af8254e32131d8c21a2a47f769909e38b0292375dfee67 datapathConfiguration="&{false false false false false }" interface=lxc0724571812c3 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bx4tn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1bebd2c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1243 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bx4tn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1bebd2c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1243 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bx4tn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f1bebd2c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1243 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bx4tn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1bebd2c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1243 identity=10929 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bx4tn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1bebd2c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1243 identity=10929 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bx4tn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f1bebd2c71 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1243 identity=10929 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bx4tn subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1bebd2c71 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1243 identity=10929 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bx4tn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.164 1c0255e4-98be-4877-b3c0-9440dccb9772 default }" containerID=78bef5571e11d10d5c6b8c0da3d8206ef90d07a0616514f53e7545ad20aa5909 datapathConfiguration="&{false false false false false }" interface=lxcbf8c0ed49775 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-97h5m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78bef5571e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-97h5m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78bef5571e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-97h5m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78bef5571e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identity=59053 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-97h5m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78bef5571e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identity=59053 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-97h5m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=78bef5571e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=885 identity=59053 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-97h5m subsys=endpoint level=info msg="Successful endpoint creation" containerID=78bef5571e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=885 identity=59053 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-97h5m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.177 076cbf1f-f8fe-4411-a457-6131d670e53b default }" containerID=19e23260ac2067ab3d8e19a5e91d3ab83ee45b13990394b8dd013305f26d1187 datapathConfiguration="&{false false false false false }" interface=lxc22e1d5ccd351 k8sPodName=openstack/pxc-operator-69cb5bbdb9-gmtt8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19e23260ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-gmtt8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19e23260ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-gmtt8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19e23260ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=24815 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-gmtt8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19e23260ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=24815 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-gmtt8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19e23260ac datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1094 identity=24815 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-gmtt8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19e23260ac datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1094 identity=24815 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-gmtt8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.2 8909b868-8a7e-42af-a772-a4600f27b6e7 default }" containerID=0e3b12511b1b52c72ab6df8e31fdc363ac98ddaafe97731db3742b97318653e4 datapathConfiguration="&{false false false false false }" interface=lxc3d9122272496 k8sPodName=local-path-storage/helper-pod-create-pvc-0309c104-2344-45a8-8f4d-33318b7c5467 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e3b12511b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=963 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0309c104-2344-45a8-8f4d-33318b7c5467 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e3b12511b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=963 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0309c104-2344-45a8-8f4d-33318b7c5467 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e3b12511b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=963 identity=56797 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0309c104-2344-45a8-8f4d-33318b7c5467 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e3b12511b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=963 identity=56797 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0309c104-2344-45a8-8f4d-33318b7c5467 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0e3b12511b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=963 identity=56797 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0309c104-2344-45a8-8f4d-33318b7c5467 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e3b12511b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=963 identity=56797 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0309c104-2344-45a8-8f4d-33318b7c5467 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.103 e53632d5-23bd-4255-a2a4-9e14f9f1ee51 default }" containerID=c931159e1bb4f54f48a4477c193acef4acad0152d18a6a886c883a1145bed91a datapathConfiguration="&{false false false false false }" interface=lxc6a0cbf1395a0 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c931159e1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c931159e1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c931159e1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identity=17234 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c931159e1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identity=17234 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c931159e1b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=841 identity=17234 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c931159e1b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=841 identity=17234 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0e3b12511b endpointID=963 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0309c104-2344-45a8-8f4d-33318b7c5467 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0e3b12511b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=963 identity=56797 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0309c104-2344-45a8-8f4d-33318b7c5467 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 1b430090-fe85-4eb4-8235-be89c43e2d58 default }" containerID=51c48b7142f61aaaa119effd7921d31218477873e5811280aa1089397d0182f6 datapathConfiguration="&{false false false false false }" interface=lxc8a4fdcbfa6c7 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51c48b7142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51c48b7142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51c48b7142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 identity=14070 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51c48b7142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 identity=14070 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51c48b7142 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1475 identity=14070 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=51c48b7142 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1475 identity=14070 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=895ee914-792e-456b-a24b-9cc45a0aca0a] Description:}]" policyAddRequest=b0e22a13-538d-4b93-8ed6-ba769939ab9a subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=b0e22a13-538d-4b93-8ed6-ba769939ab9a policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.43 89baf90e-d9f7-49fc-964b-50363c1e680b default }" containerID=61406a30c73d2dd1c16a7fa994e8d58a34ae7553e562272dfbe11d9a679461c3 datapathConfiguration="&{false false false false false }" interface=lxc55f0f42c46f9 k8sPodName=local-path-storage/helper-pod-create-pvc-2155a93f-1fe3-4265-aec9-3d604cdf42db labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61406a30c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2677 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2155a93f-1fe3-4265-aec9-3d604cdf42db subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61406a30c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2677 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2155a93f-1fe3-4265-aec9-3d604cdf42db subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61406a30c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2677 identity=56797 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2155a93f-1fe3-4265-aec9-3d604cdf42db oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61406a30c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2677 identity=56797 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2155a93f-1fe3-4265-aec9-3d604cdf42db subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=61406a30c7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2677 identity=56797 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2155a93f-1fe3-4265-aec9-3d604cdf42db subsys=endpoint level=info msg="Successful endpoint creation" containerID=61406a30c7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2677 identity=56797 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2155a93f-1fe3-4265-aec9-3d604cdf42db subsys=daemon level=info msg="Delete endpoint request" containerID=61406a30c7 endpointID=2677 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2155a93f-1fe3-4265-aec9-3d604cdf42db subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=61406a30c7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2677 identity=56797 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2155a93f-1fe3-4265-aec9-3d604cdf42db subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 6b392f9d-fec3-49fe-9689-dd86d1ec161f default }" containerID=4e8abe80f28f7427a662215c3e85387a7c70c77bad1e6b21caea19442f980fc2 datapathConfiguration="&{false false false false false }" interface=lxc77f42f497bd4 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e8abe80f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1611 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e8abe80f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1611 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e8abe80f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1611 identity=5046 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e8abe80f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1611 identity=5046 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4e8abe80f2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1611 identity=5046 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e8abe80f2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1611 identity=5046 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=3208b171-bf37-4668-a3df-18439678c980] Description:}]" policyAddRequest=6ee17dc5-0125-4e1f-9e0a-2a9c2b250669 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=6ee17dc5-0125-4e1f-9e0a-2a9c2b250669 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.182 10319dd0-8d7b-455f-ba6e-b396c9355860 default }" containerID=ac4f689db1bc475b1da55906bb64b22aea81fc7da9cf9fc85471b07f7a92e045 datapathConfiguration="&{false false false false false }" interface=lxcd2394810e273 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac4f689db1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2101 ipv4=10.0.0.182 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac4f689db1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2101 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.182 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac4f689db1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2101 identity=22455 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.182 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac4f689db1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2101 identity=22455 ipv4=10.0.0.182 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ac4f689db1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2101 identity=22455 ipv4=10.0.0.182 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac4f689db1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2101 identity=22455 ipv4=10.0.0.182 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.005589973893164879 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.70 951d24f2-685d-4479-85cf-8e1a0f719add default }" containerID=7a15e670b11041aa55aac560b70dfa9cda68d95064735881eba76dd3db290d1c datapathConfiguration="&{false false false false false }" interface=lxc2a5df47d518d k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rfbst labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a15e670b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rfbst subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a15e670b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rfbst subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7a15e670b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rfbst line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a15e670b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identity=64369 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rfbst oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a15e670b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identity=64369 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rfbst subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 37a2f9cf-0116-46fc-8658-bb86967ea278 default }" containerID=31881c35f0578629f991fe00157727ea7cd7f4ac514c45b2759ba30bfa03f9c1 datapathConfiguration="&{false false false false false }" interface=lxcc725fb6e52a0 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jpb2q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31881c35f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2694 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jpb2q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31881c35f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2694 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jpb2q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31881c35f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2694 identity=55521 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jpb2q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31881c35f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2694 identity=55521 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jpb2q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a15e670b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=253 identity=64369 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rfbst subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a15e670b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=253 identity=64369 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rfbst subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.244 519ba47e-5575-4ac2-b42a-10837dc3f557 default }" containerID=3794ca9b293e57b646a337214b01b386c61ccafdd279f6743ce4b08994098117 datapathConfiguration="&{false false false false false }" interface=lxc6451628f004c k8sPodName=monitoring/node-feature-discovery-worker-zttr7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3794ca9b29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2344 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zttr7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3794ca9b29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2344 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zttr7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3794ca9b29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2344 identity=47873 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zttr7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3794ca9b29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2344 identity=47873 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zttr7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31881c35f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2694 identity=55521 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jpb2q subsys=endpoint level=info msg="Successful endpoint creation" containerID=31881c35f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2694 identity=55521 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jpb2q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3794ca9b29 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2344 identity=47873 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zttr7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3794ca9b29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2344 identity=47873 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zttr7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.165 a839c4fe-8ee9-4c7d-94ce-008ca9630d7d default }" containerID=76cb5bb5f35e7c464fb4e2a4026996560affde15588600baee57aa8b80b9f2ff datapathConfiguration="&{false false false false false }" interface=lxc8afe5e5a9605 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j9qnb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76cb5bb5f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2024 ipv4=10.0.0.165 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j9qnb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76cb5bb5f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2024 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.165 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j9qnb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76cb5bb5f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2024 identity=43912 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.165 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j9qnb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76cb5bb5f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2024 identity=43912 ipv4=10.0.0.165 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j9qnb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76cb5bb5f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2024 identity=43912 ipv4=10.0.0.165 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j9qnb subsys=endpoint level=info msg="Successful endpoint creation" containerID=76cb5bb5f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2024 identity=43912 ipv4=10.0.0.165 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j9qnb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=976 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00976 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00976 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00976 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00976:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=976 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 21232dd7-7580-4519-a12b-1289639bc5b0 default }" containerID=6c9991fae4f133fe44832a56df915c7e1e89330a8bf188d89c7dadf4eac3167b datapathConfiguration="&{false false false false false }" interface=lxc889037ca996a k8sPodName=monitoring/kube-prometheus-stack-admission-create-nv6db labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c9991fae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2913 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nv6db subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c9991fae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2913 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d93f29b7-4252-4fb7-90d8-ce20abce2372,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d93f29b7-4252-4fb7-90d8-ce20abce2372,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nv6db subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6c9991fae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2913 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nv6db line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=d93f29b7-4252-4fb7-90d8-ce20abce2372;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=d93f29b7-4252-4fb7-90d8-ce20abce2372;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c9991fae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2913 identity=28358 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d93f29b7-4252-4fb7-90d8-ce20abce2372,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d93f29b7-4252-4fb7-90d8-ce20abce2372,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nv6db oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c9991fae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2913 identity=28358 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nv6db subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c9991fae4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2913 identity=28358 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nv6db subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c9991fae4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2913 identity=28358 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nv6db subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6c9991fae4 endpointID=2913 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-nv6db subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=d93f29b7-4252-4fb7-90d8-ce20abce2372 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=d93f29b7-4252-4fb7-90d8-ce20abce2372 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=6c9991fae4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2913 identity=28358 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nv6db subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 e2057b84-70b3-4d26-87a6-f298e7aa70e4 default }" containerID=62609b0565b7d048fcb5933e344c02fa92616eb7c89ccf0319173a79fab506a9 datapathConfiguration="&{false false false false false }" interface=lxc62a89e9f2dd4 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zcsgv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62609b0565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zcsgv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62609b0565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zcsgv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62609b0565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identity=36426 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zcsgv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62609b0565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identity=36426 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zcsgv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.74 f42f93f8-4ecf-49d3-8e72-2630c64c6790 default }" containerID=b4272209ff78ee95f63237baee65ad8ec0423552028f6f1b599ec03156d0a8c4 datapathConfiguration="&{false false false false false }" interface=lxcce480a5a27a8 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-b2c6h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4272209ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-b2c6h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4272209ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-b2c6h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4272209ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 identity=40687 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-b2c6h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4272209ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 identity=40687 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-b2c6h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62609b0565 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=561 identity=36426 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zcsgv subsys=endpoint level=info msg="Successful endpoint creation" containerID=62609b0565 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=561 identity=36426 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zcsgv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.129 b67b62fc-7b72-4b13-9cd5-229332c33d2d default }" containerID=50026065d09ee37b18ad34f4fd9d0b8181ad46609a93e6fde923a9257d40933e datapathConfiguration="&{false false false false false }" interface=lxcce5ddbb3b84c k8sPodName=monitoring/kube-prometheus-stack-grafana-668c54bc67-qd47q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50026065d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-668c54bc67-qd47q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50026065d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-668c54bc67-qd47q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50026065d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 identity=28109 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-668c54bc67-qd47q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50026065d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 identity=28109 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-668c54bc67-qd47q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4272209ff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2410 identity=40687 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-b2c6h subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4272209ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2410 identity=40687 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-b2c6h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=50026065d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=907 identity=28109 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-668c54bc67-qd47q subsys=endpoint level=info msg="Successful endpoint creation" containerID=50026065d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=907 identity=28109 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-668c54bc67-qd47q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.211 ad3ec542-a218-4792-a6e3-b2dbdacfdea9 default }" containerID=6a78d53ab1b4e9c39da59762ed34c1e150e0a80da32d9e012e79724005244db8 datapathConfiguration="&{false false false false false }" interface=lxc47cf84f6dd9b k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5md2n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a78d53ab1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=631 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5md2n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a78d53ab1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=631 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=766fd085-cb83-4f87-ad21-6c4479ef3a3d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=766fd085-cb83-4f87-ad21-6c4479ef3a3d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5md2n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=766fd085-cb83-4f87-ad21-6c4479ef3a3d;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=766fd085-cb83-4f87-ad21-6c4479ef3a3d;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a78d53ab1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=631 identity=12733 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=766fd085-cb83-4f87-ad21-6c4479ef3a3d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=766fd085-cb83-4f87-ad21-6c4479ef3a3d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5md2n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a78d53ab1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=631 identity=12733 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5md2n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a78d53ab1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=631 identity=12733 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5md2n subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a78d53ab1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=631 identity=12733 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5md2n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.209 6dcafb0f-e0c8-43c6-baa1-8883b03f3084 default }" containerID=ee7eb9e8107d0a7c382d74e7bbe05436fc1bee125fd3d848f9cf59d0cc95e746 datapathConfiguration="&{false false false false false }" interface=lxcb4799dd34b7f k8sPodName=local-path-storage/helper-pod-create-pvc-2f11e5b6-e0aa-4c3d-91f1-3dbbf613427c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee7eb9e810 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f11e5b6-e0aa-4c3d-91f1-3dbbf613427c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee7eb9e810 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f11e5b6-e0aa-4c3d-91f1-3dbbf613427c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee7eb9e810 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identity=56797 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f11e5b6-e0aa-4c3d-91f1-3dbbf613427c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee7eb9e810 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identity=56797 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f11e5b6-e0aa-4c3d-91f1-3dbbf613427c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee7eb9e810 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2298 identity=56797 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f11e5b6-e0aa-4c3d-91f1-3dbbf613427c subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee7eb9e810 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2298 identity=56797 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f11e5b6-e0aa-4c3d-91f1-3dbbf613427c subsys=daemon level=info msg="Delete endpoint request" containerID=6a78d53ab1 endpointID=631 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-5md2n subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=766fd085-cb83-4f87-ad21-6c4479ef3a3d k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=766fd085-cb83-4f87-ad21-6c4479ef3a3d k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=6a78d53ab1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=631 identity=12733 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5md2n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 cab4d980-5820-49de-8f52-e45031233b67 default }" containerID=912281e12d1694a0e5f3174565c6c9a25f88940923e209e24a478951c2b4c34e datapathConfiguration="&{false false false false false }" interface=lxcb6703e3cd466 k8sPodName=local-path-storage/helper-pod-create-pvc-70e45652-5e46-49b2-818d-390985f0afd1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=912281e12d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70e45652-5e46-49b2-818d-390985f0afd1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=912281e12d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70e45652-5e46-49b2-818d-390985f0afd1 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=912281e12d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identity=56797 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70e45652-5e46-49b2-818d-390985f0afd1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=912281e12d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identity=56797 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70e45652-5e46-49b2-818d-390985f0afd1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=912281e12d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2345 identity=56797 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70e45652-5e46-49b2-818d-390985f0afd1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=912281e12d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2345 identity=56797 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70e45652-5e46-49b2-818d-390985f0afd1 subsys=daemon level=info msg="Delete endpoint request" containerID=ee7eb9e810 endpointID=2298 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2f11e5b6-e0aa-4c3d-91f1-3dbbf613427c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ee7eb9e810 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2298 identity=56797 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f11e5b6-e0aa-4c3d-91f1-3dbbf613427c subsys=endpoint level=info msg="Delete endpoint request" containerID=912281e12d endpointID=2345 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-70e45652-5e46-49b2-818d-390985f0afd1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=912281e12d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2345 identity=56797 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-70e45652-5e46-49b2-818d-390985f0afd1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 922b460c-2525-4302-8059-30bcdf4d5361 default }" containerID=97ca99134a4fd3300805880352dba6041cad5c0324c4a0284d53e9ed83f2fa8b datapathConfiguration="&{false false false false false }" interface=lxc51d64afa014d k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97ca99134a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3192 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97ca99134a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3192 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=97ca99134a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3192 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97ca99134a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3192 identity=27665 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97ca99134a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3192 identity=27665 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=97ca99134a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3192 identity=27665 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=97ca99134a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3192 identity=27665 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.166 ee7f2525-527b-4267-a1f2-43986c2389bb default }" containerID=51643057e52d623eabecf7d49db21a32038733a370d863b704f40edcdd3b871a datapathConfiguration="&{false false false false false }" interface=lxc5cc345a5ea43 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51643057e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2472 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51643057e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2472 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51643057e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2472 identity=3839 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51643057e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2472 identity=3839 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51643057e5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2472 identity=3839 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=51643057e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2472 identity=3839 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.211 f662717b-f04c-4f2f-8d4a-7a8d17e8f00d default }" containerID=ddc5bcc6ca8479d92ae89a402f902154208ef38f722ab846eba5180b351ee2f4 datapathConfiguration="&{false false false false false }" interface=lxc1bd9e05cddb1 k8sPodName=monitoring/loki-gateway-cf54cb88c-n25tg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ddc5bcc6ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=338 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-n25tg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ddc5bcc6ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=338 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-n25tg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ddc5bcc6ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=338 identity=44461 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-n25tg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ddc5bcc6ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=338 identity=44461 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-n25tg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 14fdf273-54f2-4da3-86cd-e8c3b63d6fe6 default }" containerID=298b84013b4781a1480bea7fe7265115765da09dc85837baedbcf9e799f2ba41 datapathConfiguration="&{false false false false false }" interface=lxc729020bb2cb5 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=298b84013b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=744 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=298b84013b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=744 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=298b84013b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=744 identity=8237 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=298b84013b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=744 identity=8237 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ddc5bcc6ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=338 identity=44461 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-n25tg subsys=endpoint level=info msg="Successful endpoint creation" containerID=ddc5bcc6ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=338 identity=44461 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-n25tg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.183 ccb83de2-4902-4c00-8fa8-b278500515d9 default }" containerID=9252620967fedb744ec3183baf52f00d41cc6f692984e1ffa663101f0d212f03 datapathConfiguration="&{false false false false false }" interface=lxc115ddf7bbf69 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9252620967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9252620967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9252620967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 identity=14497 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9252620967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 identity=14497 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=298b84013b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=744 identity=8237 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=298b84013b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=744 identity=8237 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.13 20728c81-f831-46b6-9b8f-5ae5e528337e default }" containerID=f166685a0f65a23fa1699d4abb71c583b31b22ab815fcbfbd8f3fc614d172496 datapathConfiguration="&{false false false false false }" interface=lxcbf1740813b3e k8sPodName=local-path-storage/helper-pod-create-pvc-7e76288c-1596-46af-9c99-f69449a1d124 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f166685a0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2445 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7e76288c-1596-46af-9c99-f69449a1d124 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f166685a0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2445 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7e76288c-1596-46af-9c99-f69449a1d124 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f166685a0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2445 identity=56797 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7e76288c-1596-46af-9c99-f69449a1d124 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f166685a0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2445 identity=56797 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7e76288c-1596-46af-9c99-f69449a1d124 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9252620967 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1111 identity=14497 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9252620967 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1111 identity=14497 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f166685a0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2445 identity=56797 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7e76288c-1596-46af-9c99-f69449a1d124 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f166685a0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2445 identity=56797 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7e76288c-1596-46af-9c99-f69449a1d124 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f166685a0f endpointID=2445 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7e76288c-1596-46af-9c99-f69449a1d124 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f166685a0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2445 identity=56797 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7e76288c-1596-46af-9c99-f69449a1d124 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 45102b3d-5757-4282-aff2-4e5826cb37e6 default }" containerID=acd98b83c956aef63f53848af2fc22031a6d1f356b31f4820d79f1025aa1eaf8 datapathConfiguration="&{false false false false false }" interface=lxca9172d024fcb k8sPodName=monitoring/vector-v2wz4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=acd98b83c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3868 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/vector-v2wz4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=acd98b83c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3868 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/vector-v2wz4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=acd98b83c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3868 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/vector-v2wz4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=acd98b83c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3868 identity=15846 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/vector-v2wz4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=acd98b83c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3868 identity=15846 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/vector-v2wz4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=acd98b83c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3868 identity=15846 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/vector-v2wz4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=acd98b83c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3868 identity=15846 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/vector-v2wz4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.110 a184879f-7bab-481e-a6ec-a226c290f2d4 default }" containerID=6c31b07a18e3c2dbca4147cffc8a36c1f0989f90ed36b31821c5fc53d8b42447 datapathConfiguration="&{false false false false false }" interface=lxc50c7a45cc3be k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c31b07a18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3030 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c31b07a18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3030 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c31b07a18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3030 identity=32607 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c31b07a18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3030 identity=32607 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c31b07a18 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3030 identity=32607 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c31b07a18 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3030 identity=32607 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.245 b840e619-58ba-4193-b8a2-03be315bd487 default }" containerID=a30da95fe7e3a4abe66737794572b3731af15620f7e0203d3e1eaf2a679c85af datapathConfiguration="&{false false false false false }" interface=lxcdfa871f8b505 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vkl7m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a30da95fe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vkl7m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a30da95fe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vkl7m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a30da95fe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 identity=5686 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vkl7m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a30da95fe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 identity=5686 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vkl7m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a30da95fe7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2658 identity=5686 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vkl7m subsys=endpoint level=info msg="Successful endpoint creation" containerID=a30da95fe7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2658 identity=5686 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vkl7m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.78 d6655b56-3eb0-4cf2-b404-c11e954f7066 default }" containerID=078a12879f5a2f5be452e0889c70779cdfb0d0fa2fd1bbd5dd97b91eadcdc911 datapathConfiguration="&{false false false false false }" interface=lxc7236f962b216 k8sPodName=openstack/memcached-memcached-6479589586-phn9s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=078a12879f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2006 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-phn9s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=078a12879f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2006 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-phn9s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=078a12879f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2006 identity=23884 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-phn9s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=078a12879f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2006 identity=23884 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-phn9s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=078a12879f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2006 identity=23884 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-phn9s subsys=endpoint level=info msg="Successful endpoint creation" containerID=078a12879f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2006 identity=23884 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-phn9s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.163 cc7a235d-0aab-481a-a1b9-dc260f6ea917 default }" containerID=a5f987bd323f001334db921540be84b94eb0a5c9f351c1525295e41e4087e77b datapathConfiguration="&{false false false false false }" interface=lxc88575f958cc1 k8sPodName=local-path-storage/helper-pod-create-pvc-a2fd90c5-0a03-4550-91f0-8f1ac87325a5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5f987bd32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1233 ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2fd90c5-0a03-4550-91f0-8f1ac87325a5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5f987bd32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1233 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2fd90c5-0a03-4550-91f0-8f1ac87325a5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5f987bd32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1233 identity=56797 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2fd90c5-0a03-4550-91f0-8f1ac87325a5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5f987bd32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1233 identity=56797 ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2fd90c5-0a03-4550-91f0-8f1ac87325a5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5f987bd32 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1233 identity=56797 ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2fd90c5-0a03-4550-91f0-8f1ac87325a5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5f987bd32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1233 identity=56797 ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2fd90c5-0a03-4550-91f0-8f1ac87325a5 subsys=daemon level=info msg="Delete endpoint request" containerID=a5f987bd32 endpointID=1233 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a2fd90c5-0a03-4550-91f0-8f1ac87325a5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a5f987bd32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1233 identity=56797 ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2fd90c5-0a03-4550-91f0-8f1ac87325a5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 e41c546a-22dc-48e6-aeb4-fd9375686029 default }" containerID=5bc2a0420e857a3a766561d33b2d19b5850ad396327af21543bc0a66d4a19e90 datapathConfiguration="&{false false false false false }" interface=lxc6cda6e2373ef k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5bc2a0420e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5bc2a0420e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5bc2a0420e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identity=11508 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5bc2a0420e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1312 identity=11508 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5bc2a0420e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1312 identity=11508 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5bc2a0420e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1312 identity=11508 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.14 96c04d12-92be-4fdf-b3f1-638d4c186c6f default }" containerID=0360dfba99bfa271c5e350e776e712faafe9589678e74724bcc5de470ab87c4b datapathConfiguration="&{false false false false false }" interface=lxc1c4205c4c8b7 k8sPodName=openstack/keystone-api-7b4ff4b7db-7rcst labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0360dfba99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-api-7b4ff4b7db-7rcst subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0360dfba99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-api-7b4ff4b7db-7rcst subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0360dfba99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-api-7b4ff4b7db-7rcst line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0360dfba99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identity=11996 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-api-7b4ff4b7db-7rcst oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0360dfba99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identity=11996 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-api-7b4ff4b7db-7rcst subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 655d8411-8f73-4c81-a874-50c254cd8318 default }" containerID=fcf8c34eb839e1abc11739047b56f4be64463691bb7a2f736af03b58e0216b28 datapathConfiguration="&{false false false false false }" interface=lxcfe7998671605 k8sPodName=openstack/keystone-credential-setup-6kg87 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fcf8c34eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2660 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-credential-setup-6kg87 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fcf8c34eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2660 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2ad65467-afbb-4ea9-b7e3-3d5a59afac64,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=2ad65467-afbb-4ea9-b7e3-3d5a59afac64,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-credential-setup-6kg87 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2ad65467-afbb-4ea9-b7e3-3d5a59afac64;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=2ad65467-afbb-4ea9-b7e3-3d5a59afac64;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fcf8c34eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2660 identity=14415 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2ad65467-afbb-4ea9-b7e3-3d5a59afac64,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=2ad65467-afbb-4ea9-b7e3-3d5a59afac64,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-credential-setup-6kg87 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fcf8c34eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2660 identity=14415 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-credential-setup-6kg87 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0360dfba99 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=483 identity=11996 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-api-7b4ff4b7db-7rcst subsys=endpoint level=info msg="Successful endpoint creation" containerID=0360dfba99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=483 identity=11996 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-api-7b4ff4b7db-7rcst subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fcf8c34eb8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2660 identity=14415 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-credential-setup-6kg87 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fcf8c34eb8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2660 identity=14415 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-credential-setup-6kg87 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fcf8c34eb8 endpointID=2660 k8sNamespace=openstack k8sPodName=keystone-credential-setup-6kg87 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2ad65467-afbb-4ea9-b7e3-3d5a59afac64 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=2ad65467-afbb-4ea9-b7e3-3d5a59afac64 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fcf8c34eb8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2660 identity=14415 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-credential-setup-6kg87 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 ba4922d7-3a51-41ac-9eeb-7174a2d76f96 default }" containerID=a4ade78bbe2c6288cbeab61914eda576544446d89de55c3d58426ab7891a7a3d datapathConfiguration="&{false false false false false }" interface=lxce2e067576974 k8sPodName=openstack/keystone-db-init-r74xg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4ade78bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1364 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-db-init-r74xg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4ade78bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1364 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7a06f7dc-6ebe-4fc5-91b6-50748f74c92c,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=7a06f7dc-6ebe-4fc5-91b6-50748f74c92c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-db-init-r74xg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7a06f7dc-6ebe-4fc5-91b6-50748f74c92c;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=7a06f7dc-6ebe-4fc5-91b6-50748f74c92c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4ade78bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1364 identity=49578 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7a06f7dc-6ebe-4fc5-91b6-50748f74c92c,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=7a06f7dc-6ebe-4fc5-91b6-50748f74c92c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-db-init-r74xg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4ade78bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1364 identity=49578 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-db-init-r74xg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a4ade78bbe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1364 identity=49578 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-db-init-r74xg subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4ade78bbe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1364 identity=49578 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-db-init-r74xg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a4ade78bbe endpointID=1364 k8sNamespace=openstack k8sPodName=keystone-db-init-r74xg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7a06f7dc-6ebe-4fc5-91b6-50748f74c92c k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=7a06f7dc-6ebe-4fc5-91b6-50748f74c92c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a4ade78bbe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1364 identity=49578 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-db-init-r74xg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 177ee792-95fe-4807-a46f-f10d84c4c7bb default }" containerID=06ac49fb2e4e2544ea03141a1821c4fd1e8c9a750c911dbf043ad3032a88b96c datapathConfiguration="&{false false false false false }" interface=lxcf6ef90de262c k8sPodName=openstack/keystone-fernet-setup-48hh8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06ac49fb2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-fernet-setup-48hh8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06ac49fb2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=242b69f4-bb54-44e9-9be1-154001bd32f0,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=242b69f4-bb54-44e9-9be1-154001bd32f0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-fernet-setup-48hh8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=242b69f4-bb54-44e9-9be1-154001bd32f0;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=242b69f4-bb54-44e9-9be1-154001bd32f0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06ac49fb2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identity=18685 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=242b69f4-bb54-44e9-9be1-154001bd32f0,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=242b69f4-bb54-44e9-9be1-154001bd32f0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-fernet-setup-48hh8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06ac49fb2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identity=18685 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-fernet-setup-48hh8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=06ac49fb2e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1942 identity=18685 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-fernet-setup-48hh8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=06ac49fb2e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1942 identity=18685 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-fernet-setup-48hh8 subsys=daemon level=info msg="Delete endpoint request" containerID=06ac49fb2e endpointID=1942 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-48hh8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=242b69f4-bb54-44e9-9be1-154001bd32f0 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=242b69f4-bb54-44e9-9be1-154001bd32f0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=06ac49fb2e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1942 identity=18685 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-fernet-setup-48hh8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 cbd2229d-e6cf-4851-9d14-b13054b21878 default }" containerID=ddaf6af902b956e084b6f68f5d0a540f652a6f3e04d6e73d9317e64f209baa8c datapathConfiguration="&{false false false false false }" interface=lxc294e100ca18f k8sPodName=openstack/keystone-db-sync-q9tsz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ddaf6af902 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-db-sync-q9tsz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ddaf6af902 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4d54fb7c-00ba-44e0-bd85-76fe671df2da,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=4d54fb7c-00ba-44e0-bd85-76fe671df2da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-db-sync-q9tsz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4d54fb7c-00ba-44e0-bd85-76fe671df2da;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=4d54fb7c-00ba-44e0-bd85-76fe671df2da;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ddaf6af902 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identity=19446 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4d54fb7c-00ba-44e0-bd85-76fe671df2da,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=4d54fb7c-00ba-44e0-bd85-76fe671df2da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-db-sync-q9tsz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ddaf6af902 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identity=19446 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-db-sync-q9tsz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ddaf6af902 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=178 identity=19446 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-db-sync-q9tsz subsys=endpoint level=info msg="Successful endpoint creation" containerID=ddaf6af902 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=178 identity=19446 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-db-sync-q9tsz subsys=daemon level=info msg="Delete endpoint request" containerID=ddaf6af902 endpointID=178 k8sNamespace=openstack k8sPodName=keystone-db-sync-q9tsz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4d54fb7c-00ba-44e0-bd85-76fe671df2da k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=4d54fb7c-00ba-44e0-bd85-76fe671df2da k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ddaf6af902 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=178 identity=19446 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-db-sync-q9tsz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 abd04e4d-8769-471e-9d6a-468f102354a8 default }" containerID=44a7f4d7eef21d165a76cf4a193f50fd019a965b17a2daf2ae8439c2754b901b datapathConfiguration="&{false false false false false }" interface=lxc3135bff3932e k8sPodName=openstack/keystone-rabbit-init-nv589 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44a7f4d7ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-rabbit-init-nv589 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44a7f4d7ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f0a7558d-96eb-45d0-a09a-b1d4e0daf0de,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f0a7558d-96eb-45d0-a09a-b1d4e0daf0de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-rabbit-init-nv589 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f0a7558d-96eb-45d0-a09a-b1d4e0daf0de;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f0a7558d-96eb-45d0-a09a-b1d4e0daf0de;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44a7f4d7ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identity=23106 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f0a7558d-96eb-45d0-a09a-b1d4e0daf0de,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f0a7558d-96eb-45d0-a09a-b1d4e0daf0de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-rabbit-init-nv589 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=44a7f4d7ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identity=23106 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-rabbit-init-nv589 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44a7f4d7ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2342 identity=23106 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-rabbit-init-nv589 subsys=endpoint level=info msg="Successful endpoint creation" containerID=44a7f4d7ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2342 identity=23106 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-rabbit-init-nv589 subsys=daemon level=info msg="Delete endpoint request" containerID=44a7f4d7ee endpointID=2342 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-nv589 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f0a7558d-96eb-45d0-a09a-b1d4e0daf0de k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f0a7558d-96eb-45d0-a09a-b1d4e0daf0de k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=44a7f4d7ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2342 identity=23106 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-rabbit-init-nv589 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 bb97a09a-a78b-42eb-82f4-8afd23d91b0f default }" containerID=7382a6fdbac4634687bcb8447aab0c400ff65f7e8f2ec58869d5d55b6f6959f3 datapathConfiguration="&{false false false false false }" interface=lxc2e1e6a9a7e02 k8sPodName=openstack/keystone-domain-manage-hdf82 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7382a6fdba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2361 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-domain-manage-hdf82 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7382a6fdba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2361 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e2ab2983-a24a-4889-acfa-2823fa24f96c,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=e2ab2983-a24a-4889-acfa-2823fa24f96c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-domain-manage-hdf82 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7382a6fdba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2361 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-domain-manage-hdf82 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e2ab2983-a24a-4889-acfa-2823fa24f96c;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=e2ab2983-a24a-4889-acfa-2823fa24f96c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7382a6fdba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2361 identity=64842 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e2ab2983-a24a-4889-acfa-2823fa24f96c,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=e2ab2983-a24a-4889-acfa-2823fa24f96c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-domain-manage-hdf82 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7382a6fdba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2361 identity=64842 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-domain-manage-hdf82 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7382a6fdba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2361 identity=64842 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-domain-manage-hdf82 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7382a6fdba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2361 identity=64842 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-domain-manage-hdf82 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03340795649762603 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=7382a6fdba endpointID=2361 k8sNamespace=openstack k8sPodName=keystone-domain-manage-hdf82 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e2ab2983-a24a-4889-acfa-2823fa24f96c k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=e2ab2983-a24a-4889-acfa-2823fa24f96c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7382a6fdba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2361 identity=64842 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-domain-manage-hdf82 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 7fae6c84-4a26-486c-bbce-8988bbd4208b default }" containerID=c4e65f53b203fc7bc4be355d40936e36c0f4a0a7965691a57db60c3caa8d5954 datapathConfiguration="&{false false false false false }" interface=lxc8d47cb947cf9 k8sPodName=openstack/keystone-bootstrap-g6cqd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4e65f53b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-g6cqd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4e65f53b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dfbebc7c-6e5b-4436-bec4-6884bc686e57,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=dfbebc7c-6e5b-4436-bec4-6884bc686e57,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-g6cqd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=dfbebc7c-6e5b-4436-bec4-6884bc686e57;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=dfbebc7c-6e5b-4436-bec4-6884bc686e57;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c4e65f53b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-g6cqd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c4e65f53b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=58233 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dfbebc7c-6e5b-4436-bec4-6884bc686e57,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=dfbebc7c-6e5b-4436-bec4-6884bc686e57,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-g6cqd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4e65f53b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=58233 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-g6cqd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c4e65f53b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=714 identity=58233 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-g6cqd subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4e65f53b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=714 identity=58233 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-g6cqd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c4e65f53b2 endpointID=714 k8sNamespace=openstack k8sPodName=keystone-bootstrap-g6cqd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=dfbebc7c-6e5b-4436-bec4-6884bc686e57 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=dfbebc7c-6e5b-4436-bec4-6884bc686e57 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c4e65f53b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=714 identity=58233 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-g6cqd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 9eb2823b-f638-46e1-805f-1c37c3dc91d6 default }" containerID=aa614498a1d87111efb8ea1a16e8cb152b0a8215addd1a669aff1a62ded5e2c3 datapathConfiguration="&{false false false false false }" interface=lxc8a1c78eacd3b k8sPodName=local-path-storage/helper-pod-create-pvc-62084765-7a92-420b-b687-5f57c4f7ac21 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa614498a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-62084765-7a92-420b-b687-5f57c4f7ac21 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa614498a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-62084765-7a92-420b-b687-5f57c4f7ac21 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa614498a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 identity=56797 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-62084765-7a92-420b-b687-5f57c4f7ac21 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa614498a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 identity=56797 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-62084765-7a92-420b-b687-5f57c4f7ac21 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa614498a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1170 identity=56797 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-62084765-7a92-420b-b687-5f57c4f7ac21 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa614498a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1170 identity=56797 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-62084765-7a92-420b-b687-5f57c4f7ac21 subsys=daemon level=info msg="Delete endpoint request" containerID=aa614498a1 endpointID=1170 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-62084765-7a92-420b-b687-5f57c4f7ac21 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=aa614498a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1170 identity=56797 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-62084765-7a92-420b-b687-5f57c4f7ac21 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 68d70c88-054e-4593-9d76-9265b05b756f default }" containerID=fbeacccb2110c4ae9f14e540d00959f9744563267d25c2c0d6da47bd6b2fb967 datapathConfiguration="&{false false false false false }" interface=lxc47c0b546201e k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbeacccb21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbeacccb21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fbeacccb21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fbeacccb21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identity=4923 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fbeacccb21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identity=4923 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fbeacccb21 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3347 identity=4923 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbeacccb21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3347 identity=4923 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.25 11c9966a-5fab-45a9-8561-100bd783a1e1 default }" containerID=a1c886dc5db34dd47d9adbbc86d94fd5d6f7c11a33fa6ed04142f806ecf6165c datapathConfiguration="&{false false false false false }" interface=lxc38e135d7eb4e k8sPodName=openstack/barbican-api-599478b969-dndm6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1c886dc5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1494 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-api-599478b969-dndm6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1c886dc5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1494 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-api-599478b969-dndm6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a1c886dc5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1494 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-api-599478b969-dndm6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1c886dc5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1494 identity=5158 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-api-599478b969-dndm6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1c886dc5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1494 identity=5158 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-api-599478b969-dndm6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 a893c5f4-f242-4994-9855-580955d13834 default }" containerID=de2511f1218da3494f5a6d82cf2604a1a03a5de466d3071e4a0279f93db5d417 datapathConfiguration="&{false false false false false }" interface=lxc0940b7f35b7a k8sPodName=openstack/barbican-db-init-7r27x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de2511f121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1504 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-db-init-7r27x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de2511f121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1504 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5e4cb094-df59-42a7-b93f-0c79e5573eba,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=5e4cb094-df59-42a7-b93f-0c79e5573eba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-db-init-7r27x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5e4cb094-df59-42a7-b93f-0c79e5573eba;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=5e4cb094-df59-42a7-b93f-0c79e5573eba;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de2511f121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1504 identity=56762 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5e4cb094-df59-42a7-b93f-0c79e5573eba,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=5e4cb094-df59-42a7-b93f-0c79e5573eba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-db-init-7r27x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de2511f121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1504 identity=56762 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-db-init-7r27x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1c886dc5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1494 identity=5158 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-api-599478b969-dndm6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1c886dc5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1494 identity=5158 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-api-599478b969-dndm6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=de2511f121 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1504 identity=56762 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-db-init-7r27x subsys=endpoint level=info msg="Successful endpoint creation" containerID=de2511f121 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1504 identity=56762 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-db-init-7r27x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=de2511f121 endpointID=1504 k8sNamespace=openstack k8sPodName=barbican-db-init-7r27x subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5e4cb094-df59-42a7-b93f-0c79e5573eba k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=5e4cb094-df59-42a7-b93f-0c79e5573eba k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=de2511f121 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1504 identity=56762 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-db-init-7r27x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 86bc29b5-bfab-4db4-b40a-97785642351e default }" containerID=d4467e99a56fe23176829ebbe230aa34cee1872e700e191b24e189622259120f datapathConfiguration="&{false false false false false }" interface=lxc5fce05741db5 k8sPodName=openstack/barbican-db-sync-l4p7r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4467e99a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-db-sync-l4p7r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4467e99a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=db98c19c-2f75-4912-8746-a64939d25b27,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=db98c19c-2f75-4912-8746-a64939d25b27,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-db-sync-l4p7r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=db98c19c-2f75-4912-8746-a64939d25b27;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=db98c19c-2f75-4912-8746-a64939d25b27;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4467e99a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identity=8576 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=db98c19c-2f75-4912-8746-a64939d25b27,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=db98c19c-2f75-4912-8746-a64939d25b27,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-db-sync-l4p7r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4467e99a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identity=8576 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-db-sync-l4p7r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4467e99a5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=472 identity=8576 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-db-sync-l4p7r subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4467e99a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=472 identity=8576 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-db-sync-l4p7r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d4467e99a5 endpointID=472 k8sNamespace=openstack k8sPodName=barbican-db-sync-l4p7r subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=db98c19c-2f75-4912-8746-a64939d25b27 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=db98c19c-2f75-4912-8746-a64939d25b27 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d4467e99a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=472 identity=8576 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-db-sync-l4p7r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 47144a86-6bad-4a2a-af7e-e1d4e05c3d13 default }" containerID=cf90c7b7869cb858c8e1484cc5f9a2392deec9de1dc41723707e9314e0818643 datapathConfiguration="&{false false false false false }" interface=lxcaf1cac80c76d k8sPodName=openstack/barbican-rabbit-init-mqqvq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf90c7b786 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqqvq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf90c7b786 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=779b11e9-0635-439a-9412-90f5d9825002,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=779b11e9-0635-439a-9412-90f5d9825002,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqqvq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=779b11e9-0635-439a-9412-90f5d9825002;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=779b11e9-0635-439a-9412-90f5d9825002;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf90c7b786 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 identity=16820 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=779b11e9-0635-439a-9412-90f5d9825002,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=779b11e9-0635-439a-9412-90f5d9825002,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqqvq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf90c7b786 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 identity=16820 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqqvq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cf90c7b786 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=999 identity=16820 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqqvq subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf90c7b786 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=999 identity=16820 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqqvq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cf90c7b786 endpointID=999 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-mqqvq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=779b11e9-0635-439a-9412-90f5d9825002 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=779b11e9-0635-439a-9412-90f5d9825002 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=cf90c7b786 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=999 identity=16820 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-rabbit-init-mqqvq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 88d9e01e-8d6f-46c0-9812-eff246f464e9 default }" containerID=c357a777a6fc6be957d8c1427b78ad71cecf1e4fd6e69585c7f1e8b3997584e8 datapathConfiguration="&{false false false false false }" interface=lxcf4ea7c786209 k8sPodName=openstack/barbican-ks-service-598s9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c357a777a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2471 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-service-598s9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c357a777a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2471 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=59d19f68-cfcb-4103-8ac9-90d0f69fde0b,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=59d19f68-cfcb-4103-8ac9-90d0f69fde0b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-service-598s9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=59d19f68-cfcb-4103-8ac9-90d0f69fde0b;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=59d19f68-cfcb-4103-8ac9-90d0f69fde0b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c357a777a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2471 identity=19231 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=59d19f68-cfcb-4103-8ac9-90d0f69fde0b,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=59d19f68-cfcb-4103-8ac9-90d0f69fde0b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-service-598s9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c357a777a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2471 identity=19231 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-service-598s9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c357a777a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2471 identity=19231 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-service-598s9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c357a777a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2471 identity=19231 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-service-598s9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c357a777a6 endpointID=2471 k8sNamespace=openstack k8sPodName=barbican-ks-service-598s9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=59d19f68-cfcb-4103-8ac9-90d0f69fde0b k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=59d19f68-cfcb-4103-8ac9-90d0f69fde0b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c357a777a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2471 identity=19231 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-service-598s9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 5a0b0836-0526-4e89-af7e-de28e8c0c2dd default }" containerID=edd8e4d8d3ce6e7458ed03dcd2378d9bd3dde0c7abdec936c0b3a49a13465ee5 datapathConfiguration="&{false false false false false }" interface=lxc9cfb51634e59 k8sPodName=openstack/barbican-ks-endpoints-8s9sz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edd8e4d8d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8s9sz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=edd8e4d8d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=116cb8a4-8558-4413-b85c-846772c6bd64,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=116cb8a4-8558-4413-b85c-846772c6bd64,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8s9sz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=116cb8a4-8558-4413-b85c-846772c6bd64;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=116cb8a4-8558-4413-b85c-846772c6bd64;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=edd8e4d8d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 identity=15452 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=116cb8a4-8558-4413-b85c-846772c6bd64,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=116cb8a4-8558-4413-b85c-846772c6bd64,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8s9sz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=edd8e4d8d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 identity=15452 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8s9sz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=edd8e4d8d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=217 identity=15452 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8s9sz subsys=endpoint level=info msg="Successful endpoint creation" containerID=edd8e4d8d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=217 identity=15452 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8s9sz subsys=daemon level=info msg="Delete endpoint request" containerID=edd8e4d8d3 endpointID=217 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-8s9sz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=116cb8a4-8558-4413-b85c-846772c6bd64 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=116cb8a4-8558-4413-b85c-846772c6bd64 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=edd8e4d8d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=217 identity=15452 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8s9sz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 f00c98bc-5e77-4a7c-80c2-28318ee97dd5 default }" containerID=299644407780c515138cc8a1d5222be76234c3ecba2b89b0af43edbf8b9a4f30 datapathConfiguration="&{false false false false false }" interface=lxcbe5f2c132e71 k8sPodName=openstack/barbican-ks-user-65sfx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2996444077 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/barbican-ks-user-65sfx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2996444077 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e750bb2e-7fd6-4229-824c-e0e4e6f0c288,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=e750bb2e-7fd6-4229-824c-e0e4e6f0c288,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/barbican-ks-user-65sfx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e750bb2e-7fd6-4229-824c-e0e4e6f0c288;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=e750bb2e-7fd6-4229-824c-e0e4e6f0c288;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2996444077 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 identity=3441 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e750bb2e-7fd6-4229-824c-e0e4e6f0c288,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=e750bb2e-7fd6-4229-824c-e0e4e6f0c288,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/barbican-ks-user-65sfx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2996444077 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 identity=3441 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/barbican-ks-user-65sfx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2996444077 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=102 identity=3441 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/barbican-ks-user-65sfx subsys=endpoint level=info msg="Successful endpoint creation" containerID=2996444077 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=102 identity=3441 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/barbican-ks-user-65sfx subsys=daemon level=info msg="Delete endpoint request" containerID=2996444077 endpointID=102 k8sNamespace=openstack k8sPodName=barbican-ks-user-65sfx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e750bb2e-7fd6-4229-824c-e0e4e6f0c288 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=e750bb2e-7fd6-4229-824c-e0e4e6f0c288 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2996444077 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=102 identity=3441 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/barbican-ks-user-65sfx subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.114 1cc47160-ec21-4229-87dc-3ea37d77d868 default }" containerID=8b3f0006e6c6523085e84d51c3a5949e51a0db6c6043ccb1c5ea73b9a32d36b4 datapathConfiguration="&{false false false false false }" interface=lxc23bff96d63ea k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gcq2x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b3f0006e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 ipv4=10.0.0.114 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gcq2x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b3f0006e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.114 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gcq2x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8b3f0006e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.114 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gcq2x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b3f0006e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identity=35114 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.114 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gcq2x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b3f0006e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identity=35114 ipv4=10.0.0.114 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gcq2x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b3f0006e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=75 identity=35114 ipv4=10.0.0.114 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gcq2x subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b3f0006e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=75 identity=35114 ipv4=10.0.0.114 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gcq2x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.67 ce6c1380-5a48-494d-8003-755d0dbc0cef default }" containerID=5043e374acb8698297bd387103d12b2628270a6d632ea13e1437d189117ebb3e datapathConfiguration="&{false false false false false }" interface=lxcad62495e82cc k8sPodName=openstack/rook-ceph-detect-version-f6z5w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5043e374ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rook-ceph-detect-version-f6z5w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5043e374ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=94f6a972-313c-48ce-8d6d-27c3032bcd11,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=94f6a972-313c-48ce-8d6d-27c3032bcd11,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rook-ceph-detect-version-f6z5w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=94f6a972-313c-48ce-8d6d-27c3032bcd11;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=94f6a972-313c-48ce-8d6d-27c3032bcd11;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5043e374ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 identity=29964 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=94f6a972-313c-48ce-8d6d-27c3032bcd11,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=94f6a972-313c-48ce-8d6d-27c3032bcd11,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rook-ceph-detect-version-f6z5w oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5043e374ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 identity=29964 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rook-ceph-detect-version-f6z5w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5043e374ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=255 identity=29964 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rook-ceph-detect-version-f6z5w subsys=endpoint level=info msg="Successful endpoint creation" containerID=5043e374ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=255 identity=29964 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rook-ceph-detect-version-f6z5w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5043e374ac endpointID=255 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-f6z5w subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=94f6a972-313c-48ce-8d6d-27c3032bcd11 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=94f6a972-313c-48ce-8d6d-27c3032bcd11 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=5043e374ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=255 identity=29964 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rook-ceph-detect-version-f6z5w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 3da87b53-6225-4f11-a864-4e5cb3132962 default }" containerID=fbc8065076bae201a4574e9031e95a9784621842c24cc40136a4cd2a460fff75 datapathConfiguration="&{false false false false false }" interface=lxcd8154cf7cf1b k8sPodName=local-path-storage/helper-pod-create-pvc-2e472a0b-3cb6-4b24-ae90-a465304ff2c2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbc8065076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2467 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e472a0b-3cb6-4b24-ae90-a465304ff2c2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbc8065076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2467 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e472a0b-3cb6-4b24-ae90-a465304ff2c2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fbc8065076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2467 identity=56797 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e472a0b-3cb6-4b24-ae90-a465304ff2c2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fbc8065076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2467 identity=56797 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e472a0b-3cb6-4b24-ae90-a465304ff2c2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fbc8065076 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2467 identity=56797 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e472a0b-3cb6-4b24-ae90-a465304ff2c2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbc8065076 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2467 identity=56797 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e472a0b-3cb6-4b24-ae90-a465304ff2c2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.142 feaa80e0-f938-498e-9e87-c99ba2f6bb83 default }" containerID=f1cc1072fa1d78e92ba951fb86e269fc4931444fc92b4a2bcc16e5aac5fed78d datapathConfiguration="&{false false false false false }" interface=lxc440fe903066b k8sPodName=openstack/ceph-object-controller-detect-version-kdfkd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1cc1072fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kdfkd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1cc1072fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=290b9cfd-8b4a-4719-981a-37b8cfd6ab14,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=290b9cfd-8b4a-4719-981a-37b8cfd6ab14,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kdfkd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f1cc1072fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.142 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kdfkd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=290b9cfd-8b4a-4719-981a-37b8cfd6ab14;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=290b9cfd-8b4a-4719-981a-37b8cfd6ab14;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1cc1072fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identity=42303 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=290b9cfd-8b4a-4719-981a-37b8cfd6ab14,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=290b9cfd-8b4a-4719-981a-37b8cfd6ab14,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kdfkd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1cc1072fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identity=42303 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kdfkd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f1cc1072fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=569 identity=42303 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kdfkd subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1cc1072fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=569 identity=42303 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kdfkd subsys=daemon level=info msg="Delete endpoint request" containerID=fbc8065076 endpointID=2467 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2e472a0b-3cb6-4b24-ae90-a465304ff2c2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Removed endpoint" containerID=fbc8065076 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2467 identity=56797 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e472a0b-3cb6-4b24-ae90-a465304ff2c2 subsys=endpoint level=info msg="Delete endpoint request" containerID=f1cc1072fa endpointID=569 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-kdfkd subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=290b9cfd-8b4a-4719-981a-37b8cfd6ab14 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=290b9cfd-8b4a-4719-981a-37b8cfd6ab14 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=f1cc1072fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=569 identity=42303 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kdfkd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 91a4365a-8c47-4121-9bdf-deb47e260201 default }" containerID=1b2b8174395d82ed750e5f40dcce025cb588256ced602a188a85e572070d976a datapathConfiguration="&{false false false false false }" interface=lxc91b112478feb k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b2b817439 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b2b817439 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b2b817439 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identity=6906 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b2b817439 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identity=6906 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b2b817439 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=157 identity=6906 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b2b817439 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=157 identity=6906 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.221 dce9693e-d5ea-4a74-9510-df7e1a6117f0 default }" containerID=516b270cad02a87a97c1299722545eb55fd347c8a97f37a5721c2f58012950ad datapathConfiguration="&{false false false false false }" interface=lxc5cb86185d3e7 k8sPodName=openstack/glance-db-init-tkfbd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=516b270cad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3754 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-init-tkfbd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=516b270cad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3754 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=78d2aa77-4ab3-49cf-a4e1-60f9367f7037,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=78d2aa77-4ab3-49cf-a4e1-60f9367f7037,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-init-tkfbd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=516b270cad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3754 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-init-tkfbd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=78d2aa77-4ab3-49cf-a4e1-60f9367f7037;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=78d2aa77-4ab3-49cf-a4e1-60f9367f7037;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=516b270cad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3754 identity=10198 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=78d2aa77-4ab3-49cf-a4e1-60f9367f7037,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=78d2aa77-4ab3-49cf-a4e1-60f9367f7037,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-init-tkfbd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=516b270cad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3754 identity=10198 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-init-tkfbd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=516b270cad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3754 identity=10198 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-init-tkfbd subsys=endpoint level=info msg="Successful endpoint creation" containerID=516b270cad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3754 identity=10198 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-init-tkfbd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=516b270cad endpointID=3754 k8sNamespace=openstack k8sPodName=glance-db-init-tkfbd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=78d2aa77-4ab3-49cf-a4e1-60f9367f7037 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=78d2aa77-4ab3-49cf-a4e1-60f9367f7037 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=516b270cad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3754 identity=10198 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-init-tkfbd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 004286af-786e-461d-b634-61c03e166522 default }" containerID=7e0a023bd3c6e373a35d735e90010ac274c4ff60fe71fd9032201a9b7bb2c1e2 datapathConfiguration="&{false false false false false }" interface=lxc7acccbacd3a5 k8sPodName=openstack/glance-db-sync-mflwd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e0a023bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-db-sync-mflwd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e0a023bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2e5f2d69-fad2-4fe6-aa41-fe6eafc79659,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=2e5f2d69-fad2-4fe6-aa41-fe6eafc79659,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-db-sync-mflwd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2e5f2d69-fad2-4fe6-aa41-fe6eafc79659;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=2e5f2d69-fad2-4fe6-aa41-fe6eafc79659;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e0a023bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 identity=1210 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2e5f2d69-fad2-4fe6-aa41-fe6eafc79659,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=2e5f2d69-fad2-4fe6-aa41-fe6eafc79659,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-db-sync-mflwd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e0a023bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 identity=1210 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-db-sync-mflwd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7e0a023bd3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1733 identity=1210 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-db-sync-mflwd subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e0a023bd3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1733 identity=1210 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-db-sync-mflwd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.249 d0521f27-6edd-4696-a4cb-51cad84eaec8 default }" containerID=46a6329841f8ee1b12787e1f23c4e14e5d71e4b20ce8206b21bcc81522cacc4e datapathConfiguration="&{false false false false false }" interface=lxc98d23dfc4cbe k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4wmfw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46a6329841 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4046 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4wmfw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46a6329841 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4046 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4wmfw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46a6329841 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4046 identity=45421 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4wmfw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46a6329841 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4046 identity=45421 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4wmfw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 e2b346e2-9cb9-4ac7-8ca7-cc6923432ab7 default }" containerID=50b650d68b93e3488987da7f55555bc3a7ea406ca4269d348206c162e6044b75 datapathConfiguration="&{false false false false false }" interface=lxca73a2a098796 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wfkmb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50b650d68b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1939 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wfkmb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50b650d68b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1939 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wfkmb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50b650d68b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1939 identity=47490 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wfkmb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50b650d68b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1939 identity=47490 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wfkmb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46a6329841 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4046 identity=45421 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4wmfw subsys=endpoint level=info msg="Successful endpoint creation" containerID=46a6329841 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4046 identity=45421 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4wmfw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=50b650d68b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1939 identity=47490 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wfkmb subsys=endpoint level=info msg="Successful endpoint creation" containerID=50b650d68b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1939 identity=47490 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wfkmb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7e0a023bd3 endpointID=1733 k8sNamespace=openstack k8sPodName=glance-db-sync-mflwd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2e5f2d69-fad2-4fe6-aa41-fe6eafc79659 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=2e5f2d69-fad2-4fe6-aa41-fe6eafc79659 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7e0a023bd3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1733 identity=1210 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-db-sync-mflwd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 076f6059-e536-413b-8252-531afa440974 default }" containerID=26346d53138f9ed9a8509c6977b66e237496f347e29abec109461985a5887bed datapathConfiguration="&{false false false false false }" interface=lxc4f61de9cb3e8 k8sPodName=openstack/glance-rabbit-init-qkfqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26346d5313 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-rabbit-init-qkfqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26346d5313 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4ce67917-1af6-4c74-a84f-0e2a74fabca7,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4ce67917-1af6-4c74-a84f-0e2a74fabca7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-rabbit-init-qkfqb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4ce67917-1af6-4c74-a84f-0e2a74fabca7;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4ce67917-1af6-4c74-a84f-0e2a74fabca7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26346d5313 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 identity=18455 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4ce67917-1af6-4c74-a84f-0e2a74fabca7,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4ce67917-1af6-4c74-a84f-0e2a74fabca7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-rabbit-init-qkfqb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=26346d5313 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 identity=18455 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-rabbit-init-qkfqb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26346d5313 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1683 identity=18455 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-rabbit-init-qkfqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=26346d5313 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1683 identity=18455 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-rabbit-init-qkfqb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=26346d5313 endpointID=1683 k8sNamespace=openstack k8sPodName=glance-rabbit-init-qkfqb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4ce67917-1af6-4c74-a84f-0e2a74fabca7 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4ce67917-1af6-4c74-a84f-0e2a74fabca7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=26346d5313 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1683 identity=18455 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-rabbit-init-qkfqb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 70eaebdb-8d69-4c38-8c8b-12735f132b5d default }" containerID=75f6878c3eca5b47ede076975f2ad550fd0f8b2d01cd01024b2a17fce8052d7a datapathConfiguration="&{false false false false false }" interface=lxc49b7ec6489ed k8sPodName=openstack/glance-ks-service-p6mnj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75f6878c3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-p6mnj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75f6878c3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8b705661-6cbb-479f-a9f3-ac6548f2fec3,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=8b705661-6cbb-479f-a9f3-ac6548f2fec3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-p6mnj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8b705661-6cbb-479f-a9f3-ac6548f2fec3;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=8b705661-6cbb-479f-a9f3-ac6548f2fec3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75f6878c3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 identity=51639 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8b705661-6cbb-479f-a9f3-ac6548f2fec3,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=8b705661-6cbb-479f-a9f3-ac6548f2fec3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-p6mnj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75f6878c3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 identity=51639 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-p6mnj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=75f6878c3e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2043 identity=51639 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-p6mnj subsys=endpoint level=info msg="Successful endpoint creation" containerID=75f6878c3e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2043 identity=51639 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-p6mnj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=75f6878c3e endpointID=2043 k8sNamespace=openstack k8sPodName=glance-ks-service-p6mnj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8b705661-6cbb-479f-a9f3-ac6548f2fec3 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=8b705661-6cbb-479f-a9f3-ac6548f2fec3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=75f6878c3e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2043 identity=51639 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-p6mnj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 323e0e44-aaca-40c5-9aed-a54447eb8062 default }" containerID=e34e3794a4f43e74ddcd117cffecc6e6586ba5b689b82dd8ea5488d6a094ba66 datapathConfiguration="&{false false false false false }" interface=lxc0aaf65b0cfab k8sPodName=openstack/glance-ks-endpoints-9v9q4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e34e3794a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-ks-endpoints-9v9q4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e34e3794a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9911d8e6-a3b0-4c70-b690-867b9cda7194,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9911d8e6-a3b0-4c70-b690-867b9cda7194,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-ks-endpoints-9v9q4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e34e3794a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-ks-endpoints-9v9q4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9911d8e6-a3b0-4c70-b690-867b9cda7194;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=9911d8e6-a3b0-4c70-b690-867b9cda7194;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e34e3794a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 identity=60802 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9911d8e6-a3b0-4c70-b690-867b9cda7194,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9911d8e6-a3b0-4c70-b690-867b9cda7194,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-ks-endpoints-9v9q4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e34e3794a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 identity=60802 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-ks-endpoints-9v9q4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e34e3794a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=305 identity=60802 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-ks-endpoints-9v9q4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e34e3794a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=305 identity=60802 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-ks-endpoints-9v9q4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e34e3794a4 endpointID=305 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-9v9q4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9911d8e6-a3b0-4c70-b690-867b9cda7194 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=9911d8e6-a3b0-4c70-b690-867b9cda7194 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e34e3794a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=305 identity=60802 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/glance-ks-endpoints-9v9q4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 6f54f928-2317-4145-94ed-f58eaae46a86 default }" containerID=91d01c3e5ff4c6918eaa216588f5bdb2f5d6bd703bf716b9ddd97b3eb5c203f6 datapathConfiguration="&{false false false false false }" interface=lxc60076f90088d k8sPodName=openstack/glance-ks-user-jhgkd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91d01c3e5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/glance-ks-user-jhgkd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91d01c3e5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b83d12b0-af8d-4a6e-889f-fc3e68f32bdc,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=b83d12b0-af8d-4a6e-889f-fc3e68f32bdc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/glance-ks-user-jhgkd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b83d12b0-af8d-4a6e-889f-fc3e68f32bdc;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=b83d12b0-af8d-4a6e-889f-fc3e68f32bdc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91d01c3e5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identity=56913 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b83d12b0-af8d-4a6e-889f-fc3e68f32bdc,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=b83d12b0-af8d-4a6e-889f-fc3e68f32bdc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/glance-ks-user-jhgkd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91d01c3e5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identity=56913 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/glance-ks-user-jhgkd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=91d01c3e5f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=986 identity=56913 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/glance-ks-user-jhgkd subsys=endpoint level=info msg="Successful endpoint creation" containerID=91d01c3e5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=986 identity=56913 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/glance-ks-user-jhgkd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=91d01c3e5f endpointID=986 k8sNamespace=openstack k8sPodName=glance-ks-user-jhgkd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b83d12b0-af8d-4a6e-889f-fc3e68f32bdc k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=b83d12b0-af8d-4a6e-889f-fc3e68f32bdc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=91d01c3e5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=986 identity=56913 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/glance-ks-user-jhgkd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 38895d00-bec1-4dcc-86bc-4a452bb6d2c0 default }" containerID=0e5ac75d42c2356ec8fde4bb75170aa27087eb1fef52aa398bef19ecb6d68a9d datapathConfiguration="&{false false false false false }" interface=lxc5fb6f9cf832e k8sPodName=openstack/glance-metadefs-load-7wnls labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e5ac75d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3437 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-metadefs-load-7wnls subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e5ac75d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3437 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=59122ec5-fa28-467c-8218-3325ebb9dea1,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=59122ec5-fa28-467c-8218-3325ebb9dea1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-metadefs-load-7wnls subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=59122ec5-fa28-467c-8218-3325ebb9dea1;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=59122ec5-fa28-467c-8218-3325ebb9dea1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e5ac75d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3437 identity=391 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=59122ec5-fa28-467c-8218-3325ebb9dea1,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=59122ec5-fa28-467c-8218-3325ebb9dea1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-metadefs-load-7wnls oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0e5ac75d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3437 identity=391 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-metadefs-load-7wnls subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e5ac75d42 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3437 identity=391 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-metadefs-load-7wnls subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e5ac75d42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3437 identity=391 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-metadefs-load-7wnls subsys=daemon level=info msg="Delete endpoint request" containerID=0e5ac75d42 endpointID=3437 k8sNamespace=openstack k8sPodName=glance-metadefs-load-7wnls subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=59122ec5-fa28-467c-8218-3325ebb9dea1 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=59122ec5-fa28-467c-8218-3325ebb9dea1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0e5ac75d42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3437 identity=391 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-metadefs-load-7wnls subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 e65901ee-66af-4811-bc14-d8723a397218 default }" containerID=f4150a130cca91547bd43031b62003d874c8bf4ea26979ab4c468fdca5bb8c7e datapathConfiguration="&{false false false false false }" interface=lxcd7a3e36325a4 k8sPodName=openstack/glance-storage-init-pb7nh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4150a130c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-storage-init-pb7nh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4150a130c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b7b72270-a9b7-4b16-b961-8d57783951d2,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=b7b72270-a9b7-4b16-b961-8d57783951d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-storage-init-pb7nh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b7b72270-a9b7-4b16-b961-8d57783951d2;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=b7b72270-a9b7-4b16-b961-8d57783951d2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4150a130c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 identity=47806 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b7b72270-a9b7-4b16-b961-8d57783951d2,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=b7b72270-a9b7-4b16-b961-8d57783951d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-storage-init-pb7nh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4150a130c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 identity=47806 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-storage-init-pb7nh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f4150a130c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=11 identity=47806 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-storage-init-pb7nh subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4150a130c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=11 identity=47806 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-storage-init-pb7nh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f4150a130c endpointID=11 k8sNamespace=openstack k8sPodName=glance-storage-init-pb7nh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b7b72270-a9b7-4b16-b961-8d57783951d2 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=b7b72270-a9b7-4b16-b961-8d57783951d2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f4150a130c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=11 identity=47806 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-storage-init-pb7nh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 44531c6c-e8fb-4df0-8942-54b6e9737ae9 default }" containerID=f9b9a6ff2d05db3a86ef3108b053f86dfd62adbf81bfab5a6cc4693e6522c334 datapathConfiguration="&{false false false false false }" interface=lxc9dd452076205 k8sPodName=openstack/glance-api-6df5498c85-tkdg5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9b9a6ff2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-api-6df5498c85-tkdg5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9b9a6ff2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-api-6df5498c85-tkdg5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9b9a6ff2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identity=30650 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-api-6df5498c85-tkdg5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9b9a6ff2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identity=30650 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-api-6df5498c85-tkdg5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f9b9a6ff2d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=7 identity=30650 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-api-6df5498c85-tkdg5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9b9a6ff2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=7 identity=30650 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-api-6df5498c85-tkdg5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.130 3c6f79dd-22bc-4a21-94ab-e2f461384066 default }" containerID=8c714a30a171bd284cceb08bc6e6d4d23e6340f7e3fbd495376b5701ff353494 datapathConfiguration="&{false false false false false }" interface=lxccdd905aec859 k8sPodName=openstack/staffeln-conductor-78c55fb97b-b6h8j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c714a30a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/staffeln-conductor-78c55fb97b-b6h8j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c714a30a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/staffeln-conductor-78c55fb97b-b6h8j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c714a30a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 identity=39661 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/staffeln-conductor-78c55fb97b-b6h8j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c714a30a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 identity=39661 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/staffeln-conductor-78c55fb97b-b6h8j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8c714a30a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1727 identity=39661 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/staffeln-conductor-78c55fb97b-b6h8j subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c714a30a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1727 identity=39661 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/staffeln-conductor-78c55fb97b-b6h8j subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.5 7e82efe1-1141-426d-8612-5232b9cf84bc default }" containerID=bda1d3ff44bb0ff8395f092e1b65e7100e46278d948dc97a0c728879da72b2b8 datapathConfiguration="&{false false false false false }" interface=lxc730884cc16c0 k8sPodName=openstack/staffeln-api-787d575f55-p8wvk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bda1d3ff44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/staffeln-api-787d575f55-p8wvk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bda1d3ff44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/staffeln-api-787d575f55-p8wvk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bda1d3ff44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identity=20052 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/staffeln-api-787d575f55-p8wvk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bda1d3ff44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identity=20052 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/staffeln-api-787d575f55-p8wvk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 d1ab0056-d6f1-4957-bcee-a1b4d999764b default }" containerID=e90aa3a65cc1889b6c34cb20531f8f84da901008d21fedc92ef630bb4d09db82 datapathConfiguration="&{false false false false false }" interface=lxc62048ecf4d91 k8sPodName=openstack/staffeln-db-init-72gc8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e90aa3a65c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1875 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/staffeln-db-init-72gc8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e90aa3a65c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1875 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=25d300a1-186f-4148-8a87-fe40a1f5b0da,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=25d300a1-186f-4148-8a87-fe40a1f5b0da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/staffeln-db-init-72gc8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=25d300a1-186f-4148-8a87-fe40a1f5b0da;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=25d300a1-186f-4148-8a87-fe40a1f5b0da;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e90aa3a65c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1875 identity=17490 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=25d300a1-186f-4148-8a87-fe40a1f5b0da,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=25d300a1-186f-4148-8a87-fe40a1f5b0da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/staffeln-db-init-72gc8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e90aa3a65c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1875 identity=17490 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/staffeln-db-init-72gc8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bda1d3ff44 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2176 identity=20052 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/staffeln-api-787d575f55-p8wvk subsys=endpoint level=info msg="Successful endpoint creation" containerID=bda1d3ff44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2176 identity=20052 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/staffeln-api-787d575f55-p8wvk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e90aa3a65c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1875 identity=17490 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/staffeln-db-init-72gc8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e90aa3a65c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1875 identity=17490 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/staffeln-db-init-72gc8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e90aa3a65c endpointID=1875 k8sNamespace=openstack k8sPodName=staffeln-db-init-72gc8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=25d300a1-186f-4148-8a87-fe40a1f5b0da k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=25d300a1-186f-4148-8a87-fe40a1f5b0da k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=e90aa3a65c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1875 identity=17490 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/staffeln-db-init-72gc8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 6df5c9da-6861-4e44-b329-0b75e4ebf915 default }" containerID=b710e22af7f4d7ee296cc8dea002b70880a241916ee8be3923af4753f3fd78df datapathConfiguration="&{false false false false false }" interface=lxc48ad1cc827eb k8sPodName=openstack/staffeln-db-sync-w7fvh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b710e22af7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1540 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-db-sync-w7fvh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b710e22af7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1540 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8e8e5e72-e400-445d-b4e1-a424ed5954c0,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=8e8e5e72-e400-445d-b4e1-a424ed5954c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-db-sync-w7fvh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=8e8e5e72-e400-445d-b4e1-a424ed5954c0;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=8e8e5e72-e400-445d-b4e1-a424ed5954c0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b710e22af7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1540 identity=17893 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8e8e5e72-e400-445d-b4e1-a424ed5954c0,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=8e8e5e72-e400-445d-b4e1-a424ed5954c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-db-sync-w7fvh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b710e22af7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1540 identity=17893 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-db-sync-w7fvh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b710e22af7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1540 identity=17893 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-db-sync-w7fvh subsys=endpoint level=info msg="Successful endpoint creation" containerID=b710e22af7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1540 identity=17893 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-db-sync-w7fvh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager