level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.059649ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="49.661µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="987.658µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.04µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=105.225167ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.68µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="28.87µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="92.612µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="88.992µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="102.322µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="499.29µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.6µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.753934ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.952979ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="47.261µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="47.861µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="231.644µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="113.532µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="85.112µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=49.879032ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="320.536µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="15.041µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="6.86µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.250.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.413961ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="12.88µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.383344ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.26µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.421946ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.55µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="4.68µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="4.05µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.92µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.75µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="35.201µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="16.931µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="52.511µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="429.188µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="5.05µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="21.19µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="392.857µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="919.617µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.369826ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.49µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="29.081µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.250 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.250 ipAddr.ipv6="" k8sNodeIP=199.204.45.250 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.250" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.80" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.250" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.250} {CiliumInternalIP 10.0.0.80}] 10.0.0.0/24 [] [] 10.0.0.183 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:38197" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.524984952s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="16.671µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="8.99µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="39.48µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="5.63µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2693 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2693 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2693 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.510053067s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=310.698565ms file-path=/var/run/cilium/state/templates/18aa99bad1d2a58546fe97515c37047ef11b1de247b9669a6e535464c73f2f68/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2693 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1382 ipv4=10.0.0.183 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1382 identityLabels="reserved:health" ipv4=10.0.0.183 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1382 identity=4 identityLabels="reserved:health" ipv4=10.0.0.183 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.144232709s file-path=/var/run/cilium/state/templates/2c66f503808303711607f6c055edf75c9e16e196d72586fc835f1d90eef8474a/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1382 identity=4 ipv4=10.0.0.183 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 953e3a99-471f-4d15-be1d-1e1f97162e65 default }" containerID=149d695f0afb58f454f4fc2fad6c36f44831c4dea2141f874f030b942102a4d0 datapathConfiguration="&{false false false false false }" interface=lxcdd7d453a7da2 k8sPodName=kube-system/coredns-7c96b6546b-lgzkz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=149d695f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2067 ipv4=10.0.0.96 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lgzkz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=149d695f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2067 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.96 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lgzkz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=149d695f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2067 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.96 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lgzkz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=149d695f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2067 identity=11598 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.96 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lgzkz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=149d695f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2067 identity=11598 ipv4=10.0.0.96 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lgzkz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 00b06f20-3878-4c97-acef-8218e1cf733b default }" containerID=1c28b56b91b4619d4d96bed1b8357f7a117a6cceedec10bc8b348707c18bf6b2 datapathConfiguration="&{false false false false false }" interface=lxc364981f6b2f9 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ggms8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c28b56b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1020 ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ggms8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c28b56b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1020 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=5cf3b683-4513-4d5a-9709-a1d084569a56,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=5cf3b683-4513-4d5a-9709-a1d084569a56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ggms8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=5cf3b683-4513-4d5a-9709-a1d084569a56;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=5cf3b683-4513-4d5a-9709-a1d084569a56;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c28b56b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1020 identity=3037 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=5cf3b683-4513-4d5a-9709-a1d084569a56,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=5cf3b683-4513-4d5a-9709-a1d084569a56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ggms8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c28b56b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1020 identity=3037 ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ggms8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=149d695f0a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2067 identity=11598 ipv4=10.0.0.96 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lgzkz subsys=endpoint level=info msg="Successful endpoint creation" containerID=149d695f0a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2067 identity=11598 ipv4=10.0.0.96 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lgzkz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1c28b56b91 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1020 identity=3037 ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ggms8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c28b56b91 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1020 identity=3037 ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ggms8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1c28b56b91 endpointID=1020 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-ggms8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=5cf3b683-4513-4d5a-9709-a1d084569a56 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=5cf3b683-4513-4d5a-9709-a1d084569a56 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=1c28b56b91 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1020 identity=3037 ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ggms8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 7c1affcb-dee8-4d73-9fb7-396956bfc3da default }" containerID=2c981584aa1c86d3d4a28472f6a50273201316ffe1b5e3cf7a33a7e2fd0de27d datapathConfiguration="&{false false false false false }" interface=lxc4bbb6a6cf078 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gpzzr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c981584aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1626 ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gpzzr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c981584aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1626 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gpzzr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2c981584aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1626 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gpzzr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c981584aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1626 identity=10921 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gpzzr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c981584aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1626 identity=10921 ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gpzzr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c981584aa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1626 identity=10921 ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gpzzr subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c981584aa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1626 identity=10921 ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gpzzr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2693 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02693 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02693 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02693 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02693:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2693 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 900501ac-4652-4f2b-a046-39e5ac9fbe63 default }" containerID=ae469c9dfcfec62a0f8b54d7ab65fd2d4bf827ece3a6d239c06fda7a437b00f3 datapathConfiguration="&{false false false false false }" interface=lxc9be10362d7a2 k8sPodName=kube-system/coredns-67659f764b-lp8p4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae469c9dfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/coredns-67659f764b-lp8p4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae469c9dfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/coredns-67659f764b-lp8p4 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ae469c9dfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identity=11598 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/coredns-67659f764b-lp8p4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae469c9dfc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=236 identity=11598 ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/coredns-67659f764b-lp8p4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae469c9dfc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=236 identity=11598 ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/coredns-67659f764b-lp8p4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae469c9dfc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=236 identity=11598 ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/coredns-67659f764b-lp8p4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.63 645238d1-dd48-4cb8-822a-9584b9b8cc8c default }" containerID=f9915554d25d7c92f5e557fc7cb70815f8e884220215655850659bd20f1d5913 datapathConfiguration="&{false false false false false }" interface=lxc3ce6db3655eb k8sPodName=kube-system/coredns-67659f764b-mwhpb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9915554d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2590 ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-67659f764b-mwhpb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9915554d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2590 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-67659f764b-mwhpb subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f9915554d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2590 identity=11598 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-67659f764b-mwhpb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9915554d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2590 identity=11598 ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-67659f764b-mwhpb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9915554d2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2590 identity=11598 ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-67659f764b-mwhpb subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9915554d2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2590 identity=11598 ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-67659f764b-mwhpb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.22 d82089f1-2be7-4c6c-acea-fb435562b34a default }" containerID=c6e4e75231fe646d0f3d3614ec75353eb5988aae711cbe83d3f3f65e479685ba datapathConfiguration="&{false false false false false }" interface=lxc1db910cfeae5 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lr8tq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6e4e75231 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lr8tq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6e4e75231 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lr8tq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c6e4e75231 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lr8tq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6e4e75231 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 identity=1152 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lr8tq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6e4e75231 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 identity=1152 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lr8tq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c6e4e75231 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=369 identity=1152 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lr8tq subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6e4e75231 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=369 identity=1152 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lr8tq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=149d695f0a endpointID=2067 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-lgzkz subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=149d695f0a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2067 identity=11598 ipv4=10.0.0.96 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lgzkz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 e6ab3040-3153-4302-b099-a4fac9221399 default }" containerID=8fff1cfbe2a739b6f1d1b4544d3ae827877c64cad53c51b567727576f51dbc83 datapathConfiguration="&{false false false false false }" interface=lxcb979fba705c8 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bfn68 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8fff1cfbe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2913 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bfn68 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8fff1cfbe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2913 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bfn68 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8fff1cfbe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2913 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bfn68 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8fff1cfbe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2913 identity=11745 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bfn68 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8fff1cfbe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2913 identity=11745 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bfn68 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 8dd10e7e-23b5-4dc4-b351-d2e6d8136af4 default }" containerID=60f723969b19d7599b365a1793e0988919137917507a2771923f63fb589f4733 datapathConfiguration="&{false false false false false }" interface=lxc6077aef790da k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qdm7w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60f723969b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 ipv4=10.0.0.115 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qdm7w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60f723969b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.115 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qdm7w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60f723969b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 identity=13718 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.115 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qdm7w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60f723969b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 identity=13718 ipv4=10.0.0.115 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qdm7w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60f723969b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=680 identity=13718 ipv4=10.0.0.115 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qdm7w subsys=endpoint level=info msg="Successful endpoint creation" containerID=60f723969b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=680 identity=13718 ipv4=10.0.0.115 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qdm7w subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8fff1cfbe2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2913 identity=11745 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bfn68 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8fff1cfbe2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2913 identity=11745 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bfn68 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.41 11cd14e0-ebad-47a0-94bf-1530fa0cc097 default }" containerID=2458a3ba27e027880d14b9088bc09b1cd09b4cf048b9192534989c88efe37540 datapathConfiguration="&{false false false false false }" interface=lxc1b67f2029346 k8sPodName=cert-manager/cert-manager-75c4c745bc-wqgbn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2458a3ba27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=957 ipv4=10.0.0.41 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wqgbn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2458a3ba27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=957 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.41 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wqgbn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2458a3ba27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=957 identity=21023 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.41 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wqgbn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2458a3ba27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=957 identity=21023 ipv4=10.0.0.41 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wqgbn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2458a3ba27 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=957 identity=21023 ipv4=10.0.0.41 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wqgbn subsys=endpoint level=info msg="Successful endpoint creation" containerID=2458a3ba27 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=957 identity=21023 ipv4=10.0.0.41 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wqgbn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.253 497d2b20-a067-48cb-9480-c9d477710486 default }" containerID=b8b065459bcebd5a35788b96c95f773501813e6a900b8a91b68e195310dc733e datapathConfiguration="&{false false false false false }" interface=lxcc543c649aa94 k8sPodName=cert-manager/cert-manager-startupapicheck-kgnm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8b065459b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kgnm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8b065459b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=7035875e-aea6-4aee-9897-a46ad072868c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=7035875e-aea6-4aee-9897-a46ad072868c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kgnm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=7035875e-aea6-4aee-9897-a46ad072868c;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=7035875e-aea6-4aee-9897-a46ad072868c;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8b065459b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 identity=6270 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=7035875e-aea6-4aee-9897-a46ad072868c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=7035875e-aea6-4aee-9897-a46ad072868c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kgnm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8b065459b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 identity=6270 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kgnm8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8b065459b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2422 identity=6270 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kgnm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8b065459b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2422 identity=6270 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kgnm8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b8b065459b endpointID=2422 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-kgnm8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=7035875e-aea6-4aee-9897-a46ad072868c k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=7035875e-aea6-4aee-9897-a46ad072868c k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=b8b065459b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2422 identity=6270 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-kgnm8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 f5867e7e-c797-430f-9f77-14009706f618 default }" containerID=6addba328f60f27323ca5c08d574194f0e103adf82c5577fd6a17b98fc16ad87 datapathConfiguration="&{false false false false false }" interface=lxc9b8bd433dacb k8sPodName=ingress-nginx/ingress-nginx-admission-create-st27f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6addba328f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 ipv4=10.0.0.91 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-st27f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6addba328f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c83ec85d-6647-4020-90b3-64c7a8e2b424,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c83ec85d-6647-4020-90b3-64c7a8e2b424,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.91 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-st27f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=c83ec85d-6647-4020-90b3-64c7a8e2b424;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=c83ec85d-6647-4020-90b3-64c7a8e2b424;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6addba328f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 identity=14448 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c83ec85d-6647-4020-90b3-64c7a8e2b424,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c83ec85d-6647-4020-90b3-64c7a8e2b424,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.91 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-st27f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6addba328f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 identity=14448 ipv4=10.0.0.91 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-st27f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6addba328f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2919 identity=14448 ipv4=10.0.0.91 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-st27f subsys=endpoint level=info msg="Successful endpoint creation" containerID=6addba328f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2919 identity=14448 ipv4=10.0.0.91 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-st27f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6addba328f endpointID=2919 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-st27f subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=c83ec85d-6647-4020-90b3-64c7a8e2b424 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=c83ec85d-6647-4020-90b3-64c7a8e2b424 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=6addba328f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2919 identity=14448 ipv4=10.0.0.91 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-st27f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 c4374c15-89dd-4a7b-b340-122c7283bb75 default }" containerID=105ba70d64d995a6802c589eab9e243401c4e4c74183d0744bf01b355fb08b2f datapathConfiguration="&{false false false false false }" interface=lxc8e59e9f85592 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f7dsl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=105ba70d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=586 ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f7dsl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=105ba70d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=586 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f7dsl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=105ba70d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=586 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f7dsl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=105ba70d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=586 identity=9943 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f7dsl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=105ba70d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=586 identity=9943 ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f7dsl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=105ba70d64 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=586 identity=9943 ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f7dsl subsys=endpoint level=info msg="Successful endpoint creation" containerID=105ba70d64 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=586 identity=9943 ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f7dsl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.45 963661c5-b4e0-49e1-be3a-f7fb4efbbe6a default }" containerID=e7cc8f1c2165fa78ef0391f5c74bbf242fa3c7b1d47be655bf824a9f3985a2c6 datapathConfiguration="&{false false false false false }" interface=lxc6406f0389e08 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wpr4m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7cc8f1c21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3841 ipv4=10.0.0.45 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wpr4m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7cc8f1c21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3841 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5af2b940-11dd-48a8-80af-a832b5d7d47b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=5af2b940-11dd-48a8-80af-a832b5d7d47b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.45 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wpr4m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=5af2b940-11dd-48a8-80af-a832b5d7d47b;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=5af2b940-11dd-48a8-80af-a832b5d7d47b;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7cc8f1c21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3841 identity=16439 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5af2b940-11dd-48a8-80af-a832b5d7d47b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=5af2b940-11dd-48a8-80af-a832b5d7d47b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.45 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wpr4m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7cc8f1c21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3841 identity=16439 ipv4=10.0.0.45 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wpr4m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7cc8f1c21 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3841 identity=16439 ipv4=10.0.0.45 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wpr4m subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7cc8f1c21 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3841 identity=16439 ipv4=10.0.0.45 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wpr4m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e7cc8f1c21 endpointID=3841 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-wpr4m subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=5af2b940-11dd-48a8-80af-a832b5d7d47b k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=5af2b940-11dd-48a8-80af-a832b5d7d47b k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=e7cc8f1c21 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3841 identity=16439 ipv4=10.0.0.45 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wpr4m subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=15696c86-b0ea-4415-8be7-2ff3c4fb8cb1] Description:}]" policyAddRequest=b387cf5e-7b46-4ecb-bd05-62e113a0edf8 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=b387cf5e-7b46-4ecb-bd05-62e113a0edf8 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=153eaa64-3c0d-4d64-97de-f58f91a26472] Description:}]" policyAddRequest=b0997308-d6a1-4e28-a0f4-452f169abd0a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=b0997308-d6a1-4e28-a0f4-452f169abd0a policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.185 17d9c590-cbc7-48cd-844e-c24849ad3f89 default }" containerID=05c6ba02828e8564f692ceb1a02487747114d09b18415fa13065652b7db61db5 datapathConfiguration="&{false false false false false }" interface=lxcaa4f1467ac66 k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-ggts9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05c6ba0282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3441 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-ggts9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05c6ba0282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3441 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-ggts9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.8.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05c6ba0282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3441 identity=31399 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-ggts9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=05c6ba0282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3441 identity=31399 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-ggts9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=05c6ba0282 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3441 identity=31399 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-ggts9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=05c6ba0282 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3441 identity=31399 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-ggts9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.136 4aa1cecd-3980-4a96-94df-7e35faa57098 default }" containerID=f730c2b19f285c2b7b43abe04adcfde637a2ee3ef27f168e02ec24101f267b45 datapathConfiguration="&{false false false false false }" interface=lxcf0fed17f4269 k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-cb4m2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f730c2b19f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-cb4m2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f730c2b19f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-cb4m2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.13.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f730c2b19f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 identity=30996 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-cb4m2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f730c2b19f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=556 identity=30996 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-cb4m2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f730c2b19f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=556 identity=30996 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-cb4m2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f730c2b19f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=556 identity=30996 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-cb4m2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.230 68dc9be9-6235-475e-9bf9-6825682dbb10 default }" containerID=b843eb660bf06f1ad22fcf39dee698c1100ef462b216354dfe9ff1f543e84fde datapathConfiguration="&{false false false false false }" interface=lxcfcc312ca1bf5 k8sPodName=openstack/pxc-operator-7cff949c8b-9j9hf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b843eb660b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-9j9hf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b843eb660b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-9j9hf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b843eb660b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.230 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-9j9hf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b843eb660b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identity=3030 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-9j9hf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b843eb660b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identity=3030 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-9j9hf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b843eb660b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=84 identity=3030 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-9j9hf subsys=endpoint level=info msg="Successful endpoint creation" containerID=b843eb660b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=84 identity=3030 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-9j9hf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.237 3d9718cf-451a-4740-b05a-fed268687881 default }" containerID=0092b87b62da2671bffc49aa317fb7395d10bc797d98078985025fc66bf47578 datapathConfiguration="&{false false false false false }" interface=lxc3e4f266a2483 k8sPodName=local-path-storage/helper-pod-create-pvc-8f13142a-5e38-4499-bfd5-48606e8f376e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0092b87b62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8f13142a-5e38-4499-bfd5-48606e8f376e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0092b87b62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8f13142a-5e38-4499-bfd5-48606e8f376e subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0092b87b62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 identity=31739 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8f13142a-5e38-4499-bfd5-48606e8f376e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0092b87b62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 identity=31739 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8f13142a-5e38-4499-bfd5-48606e8f376e subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0092b87b62 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2090 identity=31739 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8f13142a-5e38-4499-bfd5-48606e8f376e subsys=endpoint level=info msg="Successful endpoint creation" containerID=0092b87b62 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2090 identity=31739 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8f13142a-5e38-4499-bfd5-48606e8f376e subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.14 33cb3393-9b0c-4759-992e-7d44c52684d6 default }" containerID=4fdbc57cd6fa101851f55440857046d4d9231d9aa9e2923c97d7f9dd2b5401ce datapathConfiguration="&{false false false false false }" interface=lxcceea1b5419ac k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fdbc57cd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fdbc57cd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fdbc57cd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=1766 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4fdbc57cd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=1766 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4fdbc57cd6 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2047 identity=1766 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fdbc57cd6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2047 identity=1766 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0092b87b62 endpointID=2090 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8f13142a-5e38-4499-bfd5-48606e8f376e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0092b87b62 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2090 identity=31739 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8f13142a-5e38-4499-bfd5-48606e8f376e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 ad589a70-a5a9-4066-9c5f-3e2244d4937a default }" containerID=0a62592bb243a235d94729b272e5aa0695ea970bbe1655ce887a2d4ece518120 datapathConfiguration="&{false false false false false }" interface=lxc9d43b8333d67 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a62592bb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4023 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a62592bb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4023 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a62592bb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4023 identity=11725 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a62592bb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4023 identity=11725 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0a62592bb2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=4023 identity=11725 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a62592bb2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=4023 identity=11725 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=b0b3830c-480d-46b9-8c98-bfe273c66300] Description:}]" policyAddRequest=6ed0b652-203f-4f09-b707-40f13805b509 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=6ed0b652-203f-4f09-b707-40f13805b509 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.241 6d9af05d-79f9-4012-95cd-6ca7f678c1b2 default }" containerID=3b2ff2352193b216aec6ef2753431dbf3b8d7104b812a71515dcff90cb8ab228 datapathConfiguration="&{false false false false false }" interface=lxc3d43457d6041 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b2ff23521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 ipv4=10.0.0.241 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b2ff23521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.241 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3b2ff23521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.241 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=23.0.7;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-20.0.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b2ff23521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 identity=8116 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.241 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b2ff23521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 identity=8116 ipv4=10.0.0.241 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b2ff23521 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2867 identity=8116 ipv4=10.0.0.241 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b2ff23521 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2867 identity=8116 ipv4=10.0.0.241 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009522907733304477 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.7 83cd92fb-f1d8-4d4f-a198-6d6082af6b5e default }" containerID=4e233fa5e19541d8f3450a9dfdee617520f19b94761f78bb28a527b9bcb3e281 datapathConfiguration="&{false false false false false }" interface=lxc36e60e3bfd6d k8sPodName=monitoring/node-feature-discovery-worker-hwbld labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e233fa5e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3034 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hwbld subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e233fa5e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3034 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hwbld subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4e233fa5e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3034 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hwbld line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e233fa5e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3034 identity=7212 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hwbld oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e233fa5e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3034 identity=7212 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hwbld subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e233fa5e1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3034 identity=7212 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hwbld subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e233fa5e1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3034 identity=7212 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hwbld subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.75 53ba6889-200c-488d-9429-b8358837aeb5 default }" containerID=e084e085239a8b5827e0ab68928c134cd44a8f7c0e48eddddd15f4d9adc5835b datapathConfiguration="&{false false false false false }" interface=lxc7fd3464d0456 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ngxpv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e084e08523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ngxpv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e084e08523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ngxpv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.73 19eaa023-1a31-4c85-a3ed-3d7b6f17ab06 default }" containerID=242e37a854ddfbf06dc6e5a2b033411089ca6ebb18184fd67294fadf4746a8ff datapathConfiguration="&{false false false false false }" interface=lxc27562a85f3c7 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-f2swt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=242e37a854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-f2swt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=242e37a854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-f2swt subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e084e08523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identity=23845 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ngxpv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e084e08523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identity=23845 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ngxpv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=242e37a854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identity=64421 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-f2swt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=242e37a854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identity=64421 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-f2swt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e084e08523 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=117 identity=23845 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ngxpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=e084e08523 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=117 identity=23845 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-ngxpv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=242e37a854 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1889 identity=64421 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-f2swt subsys=endpoint level=info msg="Successful endpoint creation" containerID=242e37a854 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1889 identity=64421 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-f2swt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.134 64862e85-73d1-4203-827c-333bef61a330 default }" containerID=2a094499230ec3790a76c30107bb9f5791b66c072f0f2d5ff6163dab2ecadf5d datapathConfiguration="&{false false false false false }" interface=lxc8ab05314228c k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8tr5v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a09449923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4038 ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8tr5v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a09449923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4038 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8tr5v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a09449923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4038 identity=57788 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8tr5v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a09449923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4038 identity=57788 ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8tr5v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a09449923 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4038 identity=57788 ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8tr5v subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a09449923 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4038 identity=57788 ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8tr5v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2693 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02693 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02693 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02693 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02693:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2693 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 2e0af582-79c6-4d17-bf04-a38eb0772386 default }" containerID=00304afc730c9e5c33a2f5e338224742eb41cf1c167f8dd8c1b688c1250a7b2d datapathConfiguration="&{false false false false false }" interface=lxce26e1cf4f625 k8sPodName=monitoring/kube-prometheus-stack-admission-create-trrtd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00304afc73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-trrtd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00304afc73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d08ae010-d27d-4e87-8d46-07edcbcffc01,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=d08ae010-d27d-4e87-8d46-07edcbcffc01,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-trrtd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=00304afc73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-trrtd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=d08ae010-d27d-4e87-8d46-07edcbcffc01;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=d08ae010-d27d-4e87-8d46-07edcbcffc01;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00304afc73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identity=4344 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d08ae010-d27d-4e87-8d46-07edcbcffc01,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=d08ae010-d27d-4e87-8d46-07edcbcffc01,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-trrtd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00304afc73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identity=4344 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-trrtd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00304afc73 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=417 identity=4344 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-trrtd subsys=endpoint level=info msg="Successful endpoint creation" containerID=00304afc73 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=417 identity=4344 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-trrtd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=00304afc73 endpointID=417 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-trrtd subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=d08ae010-d27d-4e87-8d46-07edcbcffc01 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=d08ae010-d27d-4e87-8d46-07edcbcffc01 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=00304afc73 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=417 identity=4344 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-trrtd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 2ff07fa8-35c5-4235-8cef-6312bc6d5803 default }" containerID=35fc408b7d0406c7ac11cccd7abb763144c38f7e51e4a3729ca94fe7828485ff datapathConfiguration="&{false false false false false }" interface=lxc2e3c07acc1f9 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-8vmpm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35fc408b7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-8vmpm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35fc408b7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-8vmpm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35fc408b7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 identity=28482 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-8vmpm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=35fc408b7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 identity=28482 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-8vmpm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 6f6adaf5-32bd-45e5-8dd2-7a6a0cb8009b default }" containerID=8a2509f519f8243366bb9a827079a4d3c5add252902b3ac9a19f65df30300e79 datapathConfiguration="&{false false false false false }" interface=lxc0957560c963d k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-qkdpw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a2509f519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3950 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-qkdpw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a2509f519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3950 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-qkdpw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:chart=kube-prometheus-stack-58.2.1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a2509f519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3950 identity=14308 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-qkdpw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a2509f519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3950 identity=14308 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-qkdpw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35fc408b7d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2162 identity=28482 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-8vmpm subsys=endpoint level=info msg="Successful endpoint creation" containerID=35fc408b7d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2162 identity=28482 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-8vmpm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.64 dffd1a3a-311b-4778-8c57-12ebd46e9c83 default }" containerID=55cba65a0e0347055de3722868f4b7b25f84c862371ddc075da91562cc9ec227 datapathConfiguration="&{false false false false false }" interface=lxc1c5a120329d1 k8sPodName=monitoring/kube-prometheus-stack-grafana-d55b85f47-fg75l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55cba65a0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2029 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d55b85f47-fg75l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55cba65a0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2029 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d55b85f47-fg75l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55cba65a0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2029 identity=3763 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d55b85f47-fg75l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55cba65a0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2029 identity=3763 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d55b85f47-fg75l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a2509f519 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3950 identity=14308 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-qkdpw subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a2509f519 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3950 identity=14308 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-qkdpw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=55cba65a0e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2029 identity=3763 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d55b85f47-fg75l subsys=endpoint level=info msg="Successful endpoint creation" containerID=55cba65a0e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2029 identity=3763 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d55b85f47-fg75l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.31 4c622ef5-c2b9-4e99-999a-7127281d9c44 default }" containerID=2806917f5c032cbea41835d029f6f29ee478dc68e9d421020cb9673336aea9f7 datapathConfiguration="&{false false false false false }" interface=lxcd0f816ddfc53 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k2wbv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2806917f5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3791 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k2wbv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2806917f5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3791 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=208ef8fa-3adc-4fcd-b4d8-79bf2d77dc69,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=208ef8fa-3adc-4fcd-b4d8-79bf2d77dc69,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k2wbv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=208ef8fa-3adc-4fcd-b4d8-79bf2d77dc69;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=208ef8fa-3adc-4fcd-b4d8-79bf2d77dc69;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2806917f5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3791 identity=59831 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=208ef8fa-3adc-4fcd-b4d8-79bf2d77dc69,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=208ef8fa-3adc-4fcd-b4d8-79bf2d77dc69,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k2wbv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2806917f5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3791 identity=59831 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k2wbv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2806917f5c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3791 identity=59831 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k2wbv subsys=endpoint level=info msg="Successful endpoint creation" containerID=2806917f5c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3791 identity=59831 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k2wbv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2806917f5c endpointID=3791 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-k2wbv subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=208ef8fa-3adc-4fcd-b4d8-79bf2d77dc69 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=208ef8fa-3adc-4fcd-b4d8-79bf2d77dc69 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=2806917f5c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3791 identity=59831 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-k2wbv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 c49a0010-1b2f-40ab-bef8-73f57447b26a default }" containerID=77900c597f9f9a3cad9021d7c589f1ee1aeb8124ce07358349a571a9306ccc2d datapathConfiguration="&{false false false false false }" interface=lxce997af29aca8 k8sPodName=local-path-storage/helper-pod-create-pvc-26725958-ca4a-417f-95ad-8cb05fae49d2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77900c597f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26725958-ca4a-417f-95ad-8cb05fae49d2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77900c597f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26725958-ca4a-417f-95ad-8cb05fae49d2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77900c597f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 identity=31739 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26725958-ca4a-417f-95ad-8cb05fae49d2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77900c597f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 identity=31739 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26725958-ca4a-417f-95ad-8cb05fae49d2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=77900c597f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=730 identity=31739 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26725958-ca4a-417f-95ad-8cb05fae49d2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=77900c597f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=730 identity=31739 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26725958-ca4a-417f-95ad-8cb05fae49d2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.5 f0d0fc2d-76ab-4bc5-b566-04f2b08a2a23 default }" containerID=8e47555ff2f1c70522f01d8aec73d52090db9c60a0dfc5503ffc6636920ab6e5 datapathConfiguration="&{false false false false false }" interface=lxc9eede4fdd122 k8sPodName=local-path-storage/helper-pod-create-pvc-1d2cc76c-94bc-43ba-8600-4a6e0ec40446 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e47555ff2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1492 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d2cc76c-94bc-43ba-8600-4a6e0ec40446 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e47555ff2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1492 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d2cc76c-94bc-43ba-8600-4a6e0ec40446 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8e47555ff2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1492 identity=31739 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d2cc76c-94bc-43ba-8600-4a6e0ec40446 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e47555ff2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1492 identity=31739 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d2cc76c-94bc-43ba-8600-4a6e0ec40446 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e47555ff2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1492 identity=31739 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d2cc76c-94bc-43ba-8600-4a6e0ec40446 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e47555ff2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1492 identity=31739 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d2cc76c-94bc-43ba-8600-4a6e0ec40446 subsys=daemon level=info msg="Delete endpoint request" containerID=8e47555ff2 endpointID=1492 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1d2cc76c-94bc-43ba-8600-4a6e0ec40446 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8e47555ff2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1492 identity=31739 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1d2cc76c-94bc-43ba-8600-4a6e0ec40446 subsys=endpoint level=info msg="Delete endpoint request" containerID=77900c597f endpointID=730 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-26725958-ca4a-417f-95ad-8cb05fae49d2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=77900c597f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=730 identity=31739 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26725958-ca4a-417f-95ad-8cb05fae49d2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 ae9a3128-3c38-469b-a557-3c5fe9c6bec9 default }" containerID=d210bc3aa603547280f49bd89c3dc0de96f63c17e164b3b17a67cd1e88a42314 datapathConfiguration="&{false false false false false }" interface=lxc485ce1ce2c6f k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d210bc3aa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4068 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d210bc3aa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4068 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d210bc3aa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4068 identity=23915 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d210bc3aa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4068 identity=23915 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d210bc3aa6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4068 identity=23915 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d210bc3aa6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4068 identity=23915 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.248 3aad85d3-e6b0-40af-922d-baab22a454d1 default }" containerID=cacf231cfcb8cc859a845964bdacdb7b86ab98e6a314df49ac81fb67cc490f64 datapathConfiguration="&{false false false false false }" interface=lxc5bbb4cf5f65f k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cacf231cfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3436 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cacf231cfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3436 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cacf231cfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3436 identity=2295 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cacf231cfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3436 identity=2295 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cacf231cfc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3436 identity=2295 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cacf231cfc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3436 identity=2295 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.124 2a6ae7d5-6d1a-4f74-b277-c71fca6a24b0 default }" containerID=a2282027bd6bb787151f1475d3b7b81d0bcf77a89246eb161bbd4a7c6a3026f7 datapathConfiguration="&{false false false false false }" interface=lxc14b0e0445b9e k8sPodName=monitoring/loki-gateway-748b556d75-5gbwl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2282027bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2272 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-5gbwl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2282027bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2272 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-5gbwl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2282027bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2272 identity=748 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-5gbwl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2282027bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2272 identity=748 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-5gbwl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 74a71aab-861e-4ea9-82dc-fc669b603098 default }" containerID=639ac39ed5158eb8f457243ed3dd6f9edbe3833980d68bd7e7194f494488ff86 datapathConfiguration="&{false false false false false }" interface=lxc24e44a000d5f k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.3 fdd66208-1862-45f6-9dbc-9f9beb832c9d default }" containerID=512ae206abf49e2862ec681f8538d8b6403d28d3633bfdc78464e31f10c18f5f datapathConfiguration="&{false false false false false }" interface=lxc8ec380939ff1 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=639ac39ed5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="New endpoint" containerID=512ae206ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=639ac39ed5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=512ae206ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=639ac39ed5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 identity=25634 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=639ac39ed5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 identity=25634 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=512ae206ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 identity=3552 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=512ae206ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 identity=3552 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2282027bd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2272 identity=748 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-5gbwl subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2282027bd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2272 identity=748 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-5gbwl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.152 749a8160-4753-4f4f-ab7a-277582b1d062 default }" containerID=5631e71950667d407bfc94006e9869d8fd2285847db425181e17c7c2db8c1547 datapathConfiguration="&{false false false false false }" interface=lxca9835b783510 k8sPodName=local-path-storage/helper-pod-create-pvc-fee7d7f7-8d87-46df-aa1c-ee3ffcba7918 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5631e71950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3848 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fee7d7f7-8d87-46df-aa1c-ee3ffcba7918 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5631e71950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3848 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fee7d7f7-8d87-46df-aa1c-ee3ffcba7918 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5631e71950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3848 identity=31739 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fee7d7f7-8d87-46df-aa1c-ee3ffcba7918 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5631e71950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3848 identity=31739 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fee7d7f7-8d87-46df-aa1c-ee3ffcba7918 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=639ac39ed5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=675 identity=25634 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=639ac39ed5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=675 identity=25634 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=512ae206ab datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2561 identity=3552 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=512ae206ab datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2561 identity=3552 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5631e71950 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3848 identity=31739 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fee7d7f7-8d87-46df-aa1c-ee3ffcba7918 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5631e71950 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3848 identity=31739 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fee7d7f7-8d87-46df-aa1c-ee3ffcba7918 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5631e71950 endpointID=3848 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fee7d7f7-8d87-46df-aa1c-ee3ffcba7918 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5631e71950 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3848 identity=31739 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fee7d7f7-8d87-46df-aa1c-ee3ffcba7918 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 52825dbf-37fe-4244-b392-18fc05cd4bcb default }" containerID=e3194d87a31d34ca865d7dcc39d61368cfca99289106f1ffc114a72a5f379c71 datapathConfiguration="&{false false false false false }" interface=lxc44cdde601e12 k8sPodName=monitoring/vector-8bbnj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3194d87a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/vector-8bbnj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3194d87a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/vector-8bbnj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3194d87a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 identity=32196 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/vector-8bbnj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3194d87a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 identity=32196 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/vector-8bbnj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3194d87a3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1469 identity=32196 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/vector-8bbnj subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3194d87a3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1469 identity=32196 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/vector-8bbnj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.59 2c53d689-d789-4f55-a1a2-833f30025c95 default }" containerID=327ba3e3ec1d96282c1fdcb1999c33d5a593cd43880864206e1a3f36e76d0f09 datapathConfiguration="&{false false false false false }" interface=lxc6bafa6244fb5 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=327ba3e3ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1186 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=327ba3e3ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1186 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=327ba3e3ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1186 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=327ba3e3ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1186 identity=45649 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=327ba3e3ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1186 identity=45649 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=327ba3e3ec datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1186 identity=45649 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=327ba3e3ec datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1186 identity=45649 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.247 cf31df8b-e86e-40c1-80d6-6c8a33028ca0 default }" containerID=2f4e5f50c83ef2de180b9ab23866b35bebb7cd595cd2d9d7b18f1f8ae7fab5fb datapathConfiguration="&{false false false false false }" interface=lxce7e5861c5112 k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zng57 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f4e5f50c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zng57 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f4e5f50c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zng57 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.12.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2f4e5f50c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identity=5568 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zng57 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f4e5f50c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identity=5568 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zng57 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f4e5f50c8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=572 identity=5568 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zng57 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f4e5f50c8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=572 identity=5568 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zng57 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.213 ee76c5a4-8aee-41e9-ab44-4c3237638484 default }" containerID=eca03143c88e3699d7c921062278981e3d3227b9542a7ac0999c98f008537a92 datapathConfiguration="&{false false false false false }" interface=lxc8260b5cd6918 k8sPodName=openstack/memcached-memcached-6479589586-cm2kl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eca03143c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2807 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-cm2kl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eca03143c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2807 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-cm2kl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eca03143c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2807 identity=57897 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-cm2kl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eca03143c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2807 identity=57897 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-cm2kl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=eca03143c8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2807 identity=57897 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-cm2kl subsys=endpoint level=info msg="Successful endpoint creation" containerID=eca03143c8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2807 identity=57897 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-cm2kl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.239 52f969f0-c977-474a-91ee-6f547cc9fd17 default }" containerID=1eabcec1fbccdb53c530a9bd1834ad370efd37c8bce7bf4ed0e2ed8574ba5077 datapathConfiguration="&{false false false false false }" interface=lxc9d94c027dae9 k8sPodName=local-path-storage/helper-pod-create-pvc-3e60b01c-fe48-4c8e-8ed6-c6ea4d5386c7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1eabcec1fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e60b01c-fe48-4c8e-8ed6-c6ea4d5386c7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1eabcec1fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e60b01c-fe48-4c8e-8ed6-c6ea4d5386c7 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1eabcec1fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identity=31739 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e60b01c-fe48-4c8e-8ed6-c6ea4d5386c7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1eabcec1fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identity=31739 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e60b01c-fe48-4c8e-8ed6-c6ea4d5386c7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1eabcec1fb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1565 identity=31739 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e60b01c-fe48-4c8e-8ed6-c6ea4d5386c7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1eabcec1fb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1565 identity=31739 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e60b01c-fe48-4c8e-8ed6-c6ea4d5386c7 subsys=daemon level=info msg="Delete endpoint request" containerID=1eabcec1fb endpointID=1565 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3e60b01c-fe48-4c8e-8ed6-c6ea4d5386c7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1eabcec1fb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1565 identity=31739 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e60b01c-fe48-4c8e-8ed6-c6ea4d5386c7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 e9cc0755-2e84-4866-8e10-aef5fbdfc704 default }" containerID=d0dd35465befa48219c65334a82ca62479f342d0353000a86d91dbf8b69edb4f datapathConfiguration="&{false false false false false }" interface=lxc02ca07bf8737 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0dd35465b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0dd35465b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d0dd35465b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 identity=13622 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0dd35465b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 identity=13622 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d0dd35465b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=895 identity=13622 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0dd35465b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=895 identity=13622 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.52 65e11da1-94f3-4818-8383-581104985fdf default }" containerID=17c31fadfa95935ebff5d7474af2786847fe637ed78a970379fdedef62b22eda datapathConfiguration="&{false false false false false }" interface=lxc503a4d5bf8a6 k8sPodName=openstack/keystone-api-855596d759-mx7ms labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17c31fadfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3522 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-api-855596d759-mx7ms subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17c31fadfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3522 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-api-855596d759-mx7ms subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=17c31fadfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3522 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-api-855596d759-mx7ms line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=17c31fadfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3522 identity=7696 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-api-855596d759-mx7ms oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17c31fadfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3522 identity=7696 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-api-855596d759-mx7ms subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 2efaae9b-fd4f-45e4-b5bc-f4762f1b75a2 default }" containerID=1a2cfaeb6bb9a86bce68f2e2c4d5c578544d48be45f08e294b818bdfc79470d5 datapathConfiguration="&{false false false false false }" interface=lxcc2999c781ac2 k8sPodName=openstack/keystone-credential-setup-bnbts labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a2cfaeb6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-bnbts subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a2cfaeb6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e9c4f85a-561a-4e1f-ae76-f0338fe08176,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=e9c4f85a-561a-4e1f-ae76-f0338fe08176,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-bnbts subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e9c4f85a-561a-4e1f-ae76-f0338fe08176;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=e9c4f85a-561a-4e1f-ae76-f0338fe08176;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a2cfaeb6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identity=45201 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e9c4f85a-561a-4e1f-ae76-f0338fe08176,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=e9c4f85a-561a-4e1f-ae76-f0338fe08176,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-bnbts oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a2cfaeb6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identity=45201 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-bnbts subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=17c31fadfa datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3522 identity=7696 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-api-855596d759-mx7ms subsys=endpoint level=info msg="Successful endpoint creation" containerID=17c31fadfa datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3522 identity=7696 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-api-855596d759-mx7ms subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1a2cfaeb6b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1405 identity=45201 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-bnbts subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a2cfaeb6b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1405 identity=45201 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-bnbts subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1a2cfaeb6b endpointID=1405 k8sNamespace=openstack k8sPodName=keystone-credential-setup-bnbts subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e9c4f85a-561a-4e1f-ae76-f0338fe08176 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=e9c4f85a-561a-4e1f-ae76-f0338fe08176 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1a2cfaeb6b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1405 identity=45201 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-bnbts subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 b2878f89-1ebb-4c29-8619-e1f0cc6331d1 default }" containerID=91d02e653b088c3148828d15ee865ded07afe60facd2062c26903be4012be426 datapathConfiguration="&{false false false false false }" interface=lxcb4cfc7d03c52 k8sPodName=openstack/keystone-db-init-5mkkf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91d02e653b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-5mkkf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91d02e653b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=34e691cd-6e7e-4a4f-b194-8099628f048a,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=34e691cd-6e7e-4a4f-b194-8099628f048a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-5mkkf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=34e691cd-6e7e-4a4f-b194-8099628f048a;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=34e691cd-6e7e-4a4f-b194-8099628f048a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91d02e653b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 identity=21960 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=34e691cd-6e7e-4a4f-b194-8099628f048a,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=34e691cd-6e7e-4a4f-b194-8099628f048a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-5mkkf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91d02e653b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 identity=21960 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-5mkkf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=91d02e653b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2174 identity=21960 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-5mkkf subsys=endpoint level=info msg="Successful endpoint creation" containerID=91d02e653b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2174 identity=21960 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-5mkkf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=91d02e653b endpointID=2174 k8sNamespace=openstack k8sPodName=keystone-db-init-5mkkf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=34e691cd-6e7e-4a4f-b194-8099628f048a k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=34e691cd-6e7e-4a4f-b194-8099628f048a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=91d02e653b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2174 identity=21960 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-db-init-5mkkf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 481f754d-9f8f-42b0-9682-47e9ea180f9a default }" containerID=88091ae2c266b83ae43dd645c16d750377f82aa8bcc0b0ef62e006b671a015bb datapathConfiguration="&{false false false false false }" interface=lxc2e827e335cbd k8sPodName=openstack/keystone-fernet-setup-x6zgg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88091ae2c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-fernet-setup-x6zgg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88091ae2c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a40dbfc1-1193-4278-a472-7655f6c2dab3,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=a40dbfc1-1193-4278-a472-7655f6c2dab3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-fernet-setup-x6zgg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=88091ae2c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-fernet-setup-x6zgg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a40dbfc1-1193-4278-a472-7655f6c2dab3;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=a40dbfc1-1193-4278-a472-7655f6c2dab3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88091ae2c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identity=62494 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a40dbfc1-1193-4278-a472-7655f6c2dab3,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=a40dbfc1-1193-4278-a472-7655f6c2dab3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-fernet-setup-x6zgg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88091ae2c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identity=62494 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-fernet-setup-x6zgg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=88091ae2c2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=697 identity=62494 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-fernet-setup-x6zgg subsys=endpoint level=info msg="Successful endpoint creation" containerID=88091ae2c2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=697 identity=62494 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-fernet-setup-x6zgg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=88091ae2c2 endpointID=697 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-x6zgg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a40dbfc1-1193-4278-a472-7655f6c2dab3 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=a40dbfc1-1193-4278-a472-7655f6c2dab3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=88091ae2c2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=697 identity=62494 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-fernet-setup-x6zgg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 23e17c1d-c83c-4ace-b8bd-f3898bd78c52 default }" containerID=95044fcdb82cf5d2c3edcb85c101fe118d11f9d63d5173dc25e8ac357a1d6e72 datapathConfiguration="&{false false false false false }" interface=lxc253a2d0d2f2b k8sPodName=openstack/keystone-db-sync-499v4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95044fcdb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1587 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-db-sync-499v4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95044fcdb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1587 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=20f653dc-d9f4-4d6f-83a9-b7fbd00e1503,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=20f653dc-d9f4-4d6f-83a9-b7fbd00e1503,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-db-sync-499v4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=95044fcdb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1587 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-db-sync-499v4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=20f653dc-d9f4-4d6f-83a9-b7fbd00e1503;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=20f653dc-d9f4-4d6f-83a9-b7fbd00e1503;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=95044fcdb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1587 identity=30798 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=20f653dc-d9f4-4d6f-83a9-b7fbd00e1503,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=20f653dc-d9f4-4d6f-83a9-b7fbd00e1503,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-db-sync-499v4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95044fcdb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1587 identity=30798 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-db-sync-499v4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=95044fcdb8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1587 identity=30798 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-db-sync-499v4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=95044fcdb8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1587 identity=30798 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-db-sync-499v4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=95044fcdb8 endpointID=1587 k8sNamespace=openstack k8sPodName=keystone-db-sync-499v4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=20f653dc-d9f4-4d6f-83a9-b7fbd00e1503 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=20f653dc-d9f4-4d6f-83a9-b7fbd00e1503 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=95044fcdb8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1587 identity=30798 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-db-sync-499v4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 03c37246-4969-4447-9792-c107b100acd7 default }" containerID=e8b81dae1617f6645233dccc50b2137ec924a17edcaceba9b9ce9a18b71af5c0 datapathConfiguration="&{false false false false false }" interface=lxc53c89c9f923c k8sPodName=openstack/keystone-rabbit-init-bj8cg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8b81dae16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-rabbit-init-bj8cg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8b81dae16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=40ee25f1-57cc-47bb-b4ff-a80600b4f09a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=40ee25f1-57cc-47bb-b4ff-a80600b4f09a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-rabbit-init-bj8cg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=40ee25f1-57cc-47bb-b4ff-a80600b4f09a;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=40ee25f1-57cc-47bb-b4ff-a80600b4f09a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e8b81dae16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identity=4871 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=40ee25f1-57cc-47bb-b4ff-a80600b4f09a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=40ee25f1-57cc-47bb-b4ff-a80600b4f09a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-rabbit-init-bj8cg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8b81dae16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identity=4871 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-rabbit-init-bj8cg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8b81dae16 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1161 identity=4871 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-rabbit-init-bj8cg subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8b81dae16 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1161 identity=4871 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-rabbit-init-bj8cg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e8b81dae16 endpointID=1161 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-bj8cg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=40ee25f1-57cc-47bb-b4ff-a80600b4f09a k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=40ee25f1-57cc-47bb-b4ff-a80600b4f09a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e8b81dae16 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1161 identity=4871 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/keystone-rabbit-init-bj8cg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 7b6ca76d-4fb2-4a6f-a226-b1bfd4081c1a default }" containerID=39fe425a66681bd9caed142a8b7094efeec591670f2d4f04366f4b4ebcfefd4b datapathConfiguration="&{false false false false false }" interface=lxc68a6bddc08e9 k8sPodName=openstack/keystone-domain-manage-x7nx4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39fe425a66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-x7nx4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39fe425a66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=175beeb0-ae8f-49ad-84b5-926a762e9c6c,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=175beeb0-ae8f-49ad-84b5-926a762e9c6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-x7nx4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=39fe425a66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-x7nx4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=175beeb0-ae8f-49ad-84b5-926a762e9c6c;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=175beeb0-ae8f-49ad-84b5-926a762e9c6c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39fe425a66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identity=553 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=175beeb0-ae8f-49ad-84b5-926a762e9c6c,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=175beeb0-ae8f-49ad-84b5-926a762e9c6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-x7nx4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39fe425a66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identity=553 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-x7nx4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39fe425a66 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=244 identity=553 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-x7nx4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=39fe425a66 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=244 identity=553 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-x7nx4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=39fe425a66 endpointID=244 k8sNamespace=openstack k8sPodName=keystone-domain-manage-x7nx4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=175beeb0-ae8f-49ad-84b5-926a762e9c6c k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=175beeb0-ae8f-49ad-84b5-926a762e9c6c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=39fe425a66 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=244 identity=553 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-x7nx4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 b9d3c09c-118a-421c-a654-aa8ea516efc0 default }" containerID=288f15be5dcf9c0b739fce8f58858be43cf77b26fb9c0f883d3b17225aa9f9c3 datapathConfiguration="&{false false false false false }" interface=lxcb77e2014cca1 k8sPodName=openstack/keystone-bootstrap-2ft7j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=288f15be5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2816 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-bootstrap-2ft7j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=288f15be5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2816 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=87037282-6246-49be-84b1-66aa4a53f1e5,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=87037282-6246-49be-84b1-66aa4a53f1e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-bootstrap-2ft7j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=87037282-6246-49be-84b1-66aa4a53f1e5;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=87037282-6246-49be-84b1-66aa4a53f1e5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=288f15be5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2816 identity=384 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=87037282-6246-49be-84b1-66aa4a53f1e5,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=87037282-6246-49be-84b1-66aa4a53f1e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-bootstrap-2ft7j oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=288f15be5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2816 identity=384 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-bootstrap-2ft7j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=288f15be5d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2816 identity=384 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-bootstrap-2ft7j subsys=endpoint level=info msg="Successful endpoint creation" containerID=288f15be5d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2816 identity=384 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-bootstrap-2ft7j subsys=daemon level=info msg="Delete endpoint request" containerID=288f15be5d endpointID=2816 k8sNamespace=openstack k8sPodName=keystone-bootstrap-2ft7j subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=87037282-6246-49be-84b1-66aa4a53f1e5 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=87037282-6246-49be-84b1-66aa4a53f1e5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=288f15be5d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2816 identity=384 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-bootstrap-2ft7j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 d92455f6-2738-4d74-aa54-936357688266 default }" containerID=69da71b17a2d1b7c7c9b77a8091ebcdd88fd288210c355c277ad7842dccd1f89 datapathConfiguration="&{false false false false false }" interface=lxc773831aa306e k8sPodName=local-path-storage/helper-pod-create-pvc-45482b86-2231-4807-8b98-1a8f3cf4825a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69da71b17a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1693 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45482b86-2231-4807-8b98-1a8f3cf4825a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69da71b17a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1693 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45482b86-2231-4807-8b98-1a8f3cf4825a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69da71b17a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1693 identity=31739 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45482b86-2231-4807-8b98-1a8f3cf4825a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69da71b17a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1693 identity=31739 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45482b86-2231-4807-8b98-1a8f3cf4825a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=69da71b17a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1693 identity=31739 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45482b86-2231-4807-8b98-1a8f3cf4825a subsys=endpoint level=info msg="Successful endpoint creation" containerID=69da71b17a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1693 identity=31739 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45482b86-2231-4807-8b98-1a8f3cf4825a subsys=daemon level=info msg="Delete endpoint request" containerID=69da71b17a endpointID=1693 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-45482b86-2231-4807-8b98-1a8f3cf4825a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=69da71b17a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1693 identity=31739 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45482b86-2231-4807-8b98-1a8f3cf4825a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 bfad6e44-6ff7-4170-84da-434912f23f6e default }" containerID=54c7a68e5a41a930c24af05e7f0505a2e727a8e7bfaa17513596f4233362d01d datapathConfiguration="&{false false false false false }" interface=lxceea83748e8ca k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54c7a68e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54c7a68e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=54c7a68e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=40579 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54c7a68e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=40579 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=54c7a68e5a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=294 identity=40579 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=54c7a68e5a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=294 identity=40579 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.034124879949139014 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.176 5e7271c0-854f-4d5d-b22b-b9209edd57ac default }" containerID=1d7b3144b547dcf7320aa0fdfd0700ba89b70c36e0dcbd55b73e84d13fa91fef datapathConfiguration="&{false false false false false }" interface=lxc807f9e7263b4 k8sPodName=openstack/barbican-api-656c86bd4b-fg4k7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d7b3144b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=981 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-656c86bd4b-fg4k7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d7b3144b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=981 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-656c86bd4b-fg4k7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1d7b3144b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=981 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-656c86bd4b-fg4k7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d7b3144b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=981 identity=2723 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-656c86bd4b-fg4k7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d7b3144b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=981 identity=2723 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-656c86bd4b-fg4k7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 a5244a6b-d155-4aa6-86aa-b34c60bcce17 default }" containerID=c675b27793604c86f43fe6080864f2845e7a3dfd04b5735270f722da7929194d datapathConfiguration="&{false false false false false }" interface=lxcfc5ee8a7a304 k8sPodName=openstack/barbican-db-init-blll8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c675b27793 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1731 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-db-init-blll8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c675b27793 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1731 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=30456ad8-f43b-4121-93c3-78f589068c1c,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=30456ad8-f43b-4121-93c3-78f589068c1c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-db-init-blll8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=30456ad8-f43b-4121-93c3-78f589068c1c;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=30456ad8-f43b-4121-93c3-78f589068c1c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c675b27793 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1731 identity=2186 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=30456ad8-f43b-4121-93c3-78f589068c1c,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=30456ad8-f43b-4121-93c3-78f589068c1c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-db-init-blll8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c675b27793 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1731 identity=2186 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-db-init-blll8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d7b3144b5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=981 identity=2723 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-656c86bd4b-fg4k7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d7b3144b5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=981 identity=2723 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-656c86bd4b-fg4k7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c675b27793 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1731 identity=2186 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-db-init-blll8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c675b27793 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1731 identity=2186 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-db-init-blll8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c675b27793 endpointID=1731 k8sNamespace=openstack k8sPodName=barbican-db-init-blll8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=30456ad8-f43b-4121-93c3-78f589068c1c k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=30456ad8-f43b-4121-93c3-78f589068c1c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c675b27793 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1731 identity=2186 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-db-init-blll8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 6fe06bc7-da50-46a9-bad7-a1706640201d default }" containerID=9f8f3fc079731f3d8db3ba469956e97aeef0c344e13bb16cfcd89ba13d6c0c5e datapathConfiguration="&{false false false false false }" interface=lxc0a570f76266c k8sPodName=openstack/barbican-db-sync-clnsm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f8f3fc079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-db-sync-clnsm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f8f3fc079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=55036d36-493f-4195-bbef-ae4f4ab0f3de,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=55036d36-493f-4195-bbef-ae4f4ab0f3de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-db-sync-clnsm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9f8f3fc079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-db-sync-clnsm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=55036d36-493f-4195-bbef-ae4f4ab0f3de;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=55036d36-493f-4195-bbef-ae4f4ab0f3de;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f8f3fc079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=1669 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=55036d36-493f-4195-bbef-ae4f4ab0f3de,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=55036d36-493f-4195-bbef-ae4f4ab0f3de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-db-sync-clnsm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f8f3fc079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=1669 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-db-sync-clnsm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f8f3fc079 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1119 identity=1669 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-db-sync-clnsm subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f8f3fc079 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1119 identity=1669 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-db-sync-clnsm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f8f3fc079 endpointID=1119 k8sNamespace=openstack k8sPodName=barbican-db-sync-clnsm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=55036d36-493f-4195-bbef-ae4f4ab0f3de k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=55036d36-493f-4195-bbef-ae4f4ab0f3de k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9f8f3fc079 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1119 identity=1669 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-db-sync-clnsm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 dad2521c-b8fd-437e-bde9-640d43c26f3c default }" containerID=16822faca99333d0d940bab11afd1e6e036322a939756378085b899d80e06494 datapathConfiguration="&{false false false false false }" interface=lxc42a15f82e5f7 k8sPodName=openstack/barbican-rabbit-init-xsrzr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16822faca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3918 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-xsrzr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16822faca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3918 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=49d41371-ed59-427b-81c4-47e3755e1a05,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=49d41371-ed59-427b-81c4-47e3755e1a05,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-xsrzr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=49d41371-ed59-427b-81c4-47e3755e1a05;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=49d41371-ed59-427b-81c4-47e3755e1a05;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=16822faca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3918 identity=13990 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=49d41371-ed59-427b-81c4-47e3755e1a05,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=49d41371-ed59-427b-81c4-47e3755e1a05,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-xsrzr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16822faca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3918 identity=13990 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-xsrzr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=16822faca9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3918 identity=13990 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-xsrzr subsys=endpoint level=info msg="Successful endpoint creation" containerID=16822faca9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3918 identity=13990 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-xsrzr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=16822faca9 endpointID=3918 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-xsrzr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=49d41371-ed59-427b-81c4-47e3755e1a05 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=49d41371-ed59-427b-81c4-47e3755e1a05 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=16822faca9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3918 identity=13990 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-rabbit-init-xsrzr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 fcfd6511-215e-44d8-82ba-a19fb937cf57 default }" containerID=6bb5cfcf38e9fa82d26535ec15afd4b3a5cfa44a674f0e69546795fc1666376c datapathConfiguration="&{false false false false false }" interface=lxcb962ddac269c k8sPodName=openstack/barbican-ks-service-b5rz9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bb5cfcf38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-ks-service-b5rz9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bb5cfcf38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=994de8e8-68d4-415b-9cf6-105c48ce4286,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=994de8e8-68d4-415b-9cf6-105c48ce4286,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-ks-service-b5rz9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=994de8e8-68d4-415b-9cf6-105c48ce4286;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=994de8e8-68d4-415b-9cf6-105c48ce4286;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bb5cfcf38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identity=36860 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=994de8e8-68d4-415b-9cf6-105c48ce4286,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=994de8e8-68d4-415b-9cf6-105c48ce4286,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-ks-service-b5rz9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6bb5cfcf38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identity=36860 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-ks-service-b5rz9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6bb5cfcf38 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=740 identity=36860 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-ks-service-b5rz9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bb5cfcf38 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=740 identity=36860 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-ks-service-b5rz9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6bb5cfcf38 endpointID=740 k8sNamespace=openstack k8sPodName=barbican-ks-service-b5rz9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=994de8e8-68d4-415b-9cf6-105c48ce4286 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=994de8e8-68d4-415b-9cf6-105c48ce4286 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6bb5cfcf38 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=740 identity=36860 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-ks-service-b5rz9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 f4df9e66-58b3-4d00-81f2-dd439daa2a58 default }" containerID=f07361fe2f21a936814af8d5b16df31818b6f474bf1d5ed20771a32a0bf978f4 datapathConfiguration="&{false false false false false }" interface=lxc636be4bd9998 k8sPodName=openstack/barbican-ks-endpoints-7cz59 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f07361fe2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7cz59 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f07361fe2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ef3e9091-72da-43d8-bbee-c1a3ad6a4836,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ef3e9091-72da-43d8-bbee-c1a3ad6a4836,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7cz59 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ef3e9091-72da-43d8-bbee-c1a3ad6a4836;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=ef3e9091-72da-43d8-bbee-c1a3ad6a4836;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f07361fe2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 identity=9409 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ef3e9091-72da-43d8-bbee-c1a3ad6a4836,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ef3e9091-72da-43d8-bbee-c1a3ad6a4836,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7cz59 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f07361fe2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=552 identity=9409 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7cz59 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f07361fe2f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=552 identity=9409 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7cz59 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f07361fe2f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=552 identity=9409 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7cz59 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f07361fe2f endpointID=552 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-7cz59 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ef3e9091-72da-43d8-bbee-c1a3ad6a4836 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=ef3e9091-72da-43d8-bbee-c1a3ad6a4836 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f07361fe2f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=552 identity=9409 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7cz59 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 1ab6739e-95e3-406e-a890-cdbf417c7bc7 default }" containerID=96d3dc3cf664c6917e925755faa650728de851ec96a82ca879e1283a994a72b6 datapathConfiguration="&{false false false false false }" interface=lxc9de960f5479b k8sPodName=openstack/barbican-ks-user-56mrx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96d3dc3cf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1062 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-user-56mrx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96d3dc3cf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1062 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d78c930b-3186-4ffb-90fa-5173b39c8968,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=d78c930b-3186-4ffb-90fa-5173b39c8968,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-user-56mrx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d78c930b-3186-4ffb-90fa-5173b39c8968;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=d78c930b-3186-4ffb-90fa-5173b39c8968;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=96d3dc3cf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1062 identity=14507 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d78c930b-3186-4ffb-90fa-5173b39c8968,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=d78c930b-3186-4ffb-90fa-5173b39c8968,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-user-56mrx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96d3dc3cf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1062 identity=14507 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-user-56mrx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96d3dc3cf6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1062 identity=14507 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-user-56mrx subsys=endpoint level=info msg="Successful endpoint creation" containerID=96d3dc3cf6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1062 identity=14507 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-user-56mrx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=96d3dc3cf6 endpointID=1062 k8sNamespace=openstack k8sPodName=barbican-ks-user-56mrx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d78c930b-3186-4ffb-90fa-5173b39c8968 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=d78c930b-3186-4ffb-90fa-5173b39c8968 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=96d3dc3cf6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1062 identity=14507 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-user-56mrx subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.175 19cd4e7a-542c-4d0e-a166-9c937a2f8fcf default }" containerID=7bc4b2fb1020800f229a3ab22edaa15cafcde7f502085c0af1ea1a8bb57d769a datapathConfiguration="&{false false false false false }" interface=lxc0e6d54f153a6 k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-tkrdn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7bc4b2fb10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1387 ipv4=10.0.0.175 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-tkrdn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7bc4b2fb10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1387 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.175 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-tkrdn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7bc4b2fb10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1387 identity=1922 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.175 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-tkrdn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7bc4b2fb10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1387 identity=1922 ipv4=10.0.0.175 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-tkrdn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7bc4b2fb10 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1387 identity=1922 ipv4=10.0.0.175 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-tkrdn subsys=endpoint level=info msg="Successful endpoint creation" containerID=7bc4b2fb10 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1387 identity=1922 ipv4=10.0.0.175 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-tkrdn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.137 b4d6c9c7-2733-4e1d-bd79-55edd8d53d2f default }" containerID=7db485bd74ff2e0f5d07d4ffab77818383b332d40f08e88ce34266af0e010dfc datapathConfiguration="&{false false false false false }" interface=lxc517012a6b6e8 k8sPodName=openstack/rook-ceph-detect-version-wp4dx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7db485bd74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=726 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wp4dx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7db485bd74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=726 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=fe9a82e5-c960-47e7-a95d-e120b471d46e,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=fe9a82e5-c960-47e7-a95d-e120b471d46e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wp4dx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=fe9a82e5-c960-47e7-a95d-e120b471d46e;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=fe9a82e5-c960-47e7-a95d-e120b471d46e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7db485bd74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=726 identity=19607 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=fe9a82e5-c960-47e7-a95d-e120b471d46e,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=fe9a82e5-c960-47e7-a95d-e120b471d46e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wp4dx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7db485bd74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=726 identity=19607 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wp4dx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7db485bd74 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=726 identity=19607 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wp4dx subsys=endpoint level=info msg="Successful endpoint creation" containerID=7db485bd74 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=726 identity=19607 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wp4dx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7db485bd74 endpointID=726 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-wp4dx subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=fe9a82e5-c960-47e7-a95d-e120b471d46e k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=fe9a82e5-c960-47e7-a95d-e120b471d46e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=7db485bd74 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=726 identity=19607 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wp4dx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 b2b0abdf-7e80-42ef-93d8-be7e60a75d9c default }" containerID=2ae0c2a24073b3b2d09cc6a9ba6a3da40213aa44ca7f630ed1bdc8a2dc2edc58 datapathConfiguration="&{false false false false false }" interface=lxc79fde178cdc0 k8sPodName=local-path-storage/helper-pod-create-pvc-bda554f5-8237-44cd-bcce-d953adb1ca11 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ae0c2a240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3724 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bda554f5-8237-44cd-bcce-d953adb1ca11 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ae0c2a240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3724 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bda554f5-8237-44cd-bcce-d953adb1ca11 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ae0c2a240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3724 identity=31739 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bda554f5-8237-44cd-bcce-d953adb1ca11 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ae0c2a240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3724 identity=31739 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bda554f5-8237-44cd-bcce-d953adb1ca11 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ae0c2a240 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3724 identity=31739 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bda554f5-8237-44cd-bcce-d953adb1ca11 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ae0c2a240 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3724 identity=31739 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bda554f5-8237-44cd-bcce-d953adb1ca11 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.139 e03cecff-2c48-4509-84f2-905ee2e574ff default }" containerID=e24723d621a224e5f0d096196828163cda210835d42b187fbe166ba48eb2cc0c datapathConfiguration="&{false false false false false }" interface=lxcc45ac48867c7 k8sPodName=openstack/ceph-object-controller-detect-version-qh48k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e24723d621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qh48k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e24723d621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=96887e9d-6dbc-40ea-b9a4-169b36cc19ad,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=96887e9d-6dbc-40ea-b9a4-169b36cc19ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qh48k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=96887e9d-6dbc-40ea-b9a4-169b36cc19ad;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=96887e9d-6dbc-40ea-b9a4-169b36cc19ad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e24723d621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 identity=22482 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=96887e9d-6dbc-40ea-b9a4-169b36cc19ad,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=96887e9d-6dbc-40ea-b9a4-169b36cc19ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qh48k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e24723d621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 identity=22482 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qh48k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e24723d621 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=271 identity=22482 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qh48k subsys=endpoint level=info msg="Successful endpoint creation" containerID=e24723d621 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=271 identity=22482 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qh48k subsys=daemon level=info msg="Delete endpoint request" containerID=2ae0c2a240 endpointID=3724 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bda554f5-8237-44cd-bcce-d953adb1ca11 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2ae0c2a240 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3724 identity=31739 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bda554f5-8237-44cd-bcce-d953adb1ca11 subsys=endpoint level=info msg="Delete endpoint request" containerID=e24723d621 endpointID=271 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-qh48k subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=96887e9d-6dbc-40ea-b9a4-169b36cc19ad k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=96887e9d-6dbc-40ea-b9a4-169b36cc19ad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=e24723d621 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=271 identity=22482 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qh48k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 c206d320-3fff-46d1-b0d5-e250aba5abad default }" containerID=f8e590b8b8c434568d15fd15c4dd24616016d4c1dfe8761b1ad744bdefafdbb3 datapathConfiguration="&{false false false false false }" interface=lxc5881e1e12c12 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8e590b8b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8e590b8b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8e590b8b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 identity=4395 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8e590b8b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 identity=4395 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f8e590b8b8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=109 identity=4395 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8e590b8b8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=109 identity=4395 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.212 294a272b-6e6e-4b7f-a873-a4467531c6c8 default }" containerID=4e924a9594a72f54d359cf952f4968a9dda2b673827a2bbc93902217bd665f8c datapathConfiguration="&{false false false false false }" interface=lxce9e456ac5ba4 k8sPodName=openstack/glance-db-init-7v8lc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e924a9594 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-db-init-7v8lc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e924a9594 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f6b545d8-aa4d-4276-8fde-cde35140057f,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=f6b545d8-aa4d-4276-8fde-cde35140057f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-db-init-7v8lc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f6b545d8-aa4d-4276-8fde-cde35140057f;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=f6b545d8-aa4d-4276-8fde-cde35140057f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e924a9594 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 identity=48644 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f6b545d8-aa4d-4276-8fde-cde35140057f,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=f6b545d8-aa4d-4276-8fde-cde35140057f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-db-init-7v8lc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4e924a9594 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 identity=48644 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-db-init-7v8lc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e924a9594 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=871 identity=48644 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-db-init-7v8lc subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e924a9594 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=871 identity=48644 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-db-init-7v8lc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4e924a9594 endpointID=871 k8sNamespace=openstack k8sPodName=glance-db-init-7v8lc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f6b545d8-aa4d-4276-8fde-cde35140057f k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=f6b545d8-aa4d-4276-8fde-cde35140057f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4e924a9594 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=871 identity=48644 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-db-init-7v8lc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 1d37a2ce-95d3-4a75-a874-ac4ecc480b25 default }" containerID=b3c42b2b1250e8a6b2368ec6b39c2ff11b1b3b0be98610bd2c6d9b3833fd531e datapathConfiguration="&{false false false false false }" interface=lxcd461de0942f4 k8sPodName=openstack/glance-db-sync-tb2gs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3c42b2b12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-sync-tb2gs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3c42b2b12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d8b84f4e-b65a-4b0f-8e94-6beeb75b2c1b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=d8b84f4e-b65a-4b0f-8e94-6beeb75b2c1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-sync-tb2gs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d8b84f4e-b65a-4b0f-8e94-6beeb75b2c1b;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=d8b84f4e-b65a-4b0f-8e94-6beeb75b2c1b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3c42b2b12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 identity=63894 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d8b84f4e-b65a-4b0f-8e94-6beeb75b2c1b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=d8b84f4e-b65a-4b0f-8e94-6beeb75b2c1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-sync-tb2gs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3c42b2b12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1622 identity=63894 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-sync-tb2gs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b3c42b2b12 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1622 identity=63894 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-sync-tb2gs subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3c42b2b12 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1622 identity=63894 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-sync-tb2gs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b3c42b2b12 endpointID=1622 k8sNamespace=openstack k8sPodName=glance-db-sync-tb2gs subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d8b84f4e-b65a-4b0f-8e94-6beeb75b2c1b k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=d8b84f4e-b65a-4b0f-8e94-6beeb75b2c1b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b3c42b2b12 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1622 identity=63894 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-sync-tb2gs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 e43e4b5c-6b3f-4326-bb4e-aaa75965ae1c default }" containerID=0344c7f130fd05bc66b9cd6345b5154f6f21451eb5ee5a8dd196ece242d7f968 datapathConfiguration="&{false false false false false }" interface=lxc70d9cfd5ddf6 k8sPodName=openstack/glance-rabbit-init-gbzfb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0344c7f130 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-rabbit-init-gbzfb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0344c7f130 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=53eca81c-4179-44d0-993f-a4a38501661c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=53eca81c-4179-44d0-993f-a4a38501661c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-rabbit-init-gbzfb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=53eca81c-4179-44d0-993f-a4a38501661c;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=53eca81c-4179-44d0-993f-a4a38501661c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0344c7f130 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 identity=41460 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=53eca81c-4179-44d0-993f-a4a38501661c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=53eca81c-4179-44d0-993f-a4a38501661c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-rabbit-init-gbzfb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0344c7f130 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 identity=41460 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-rabbit-init-gbzfb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0344c7f130 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2023 identity=41460 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-rabbit-init-gbzfb subsys=endpoint level=info msg="Successful endpoint creation" containerID=0344c7f130 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2023 identity=41460 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-rabbit-init-gbzfb subsys=daemon level=info msg="Delete endpoint request" containerID=0344c7f130 endpointID=2023 k8sNamespace=openstack k8sPodName=glance-rabbit-init-gbzfb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=53eca81c-4179-44d0-993f-a4a38501661c k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=53eca81c-4179-44d0-993f-a4a38501661c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0344c7f130 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2023 identity=41460 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-rabbit-init-gbzfb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 ace3703a-8726-455c-a1a5-d327266c361a default }" containerID=086fb3bec98af3b99c669421b296363224b784624c8418ad14ff4e2908ab06ad datapathConfiguration="&{false false false false false }" interface=lxc22269c5dbd63 k8sPodName=openstack/glance-ks-service-mxhwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=086fb3bec9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-service-mxhwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=086fb3bec9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=919e8932-b257-4470-a611-85ccbf983848,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=919e8932-b257-4470-a611-85ccbf983848,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-service-mxhwp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=919e8932-b257-4470-a611-85ccbf983848;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=919e8932-b257-4470-a611-85ccbf983848;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=086fb3bec9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identity=42284 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=919e8932-b257-4470-a611-85ccbf983848,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=919e8932-b257-4470-a611-85ccbf983848,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-service-mxhwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=086fb3bec9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identity=42284 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-service-mxhwp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=086fb3bec9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=337 identity=42284 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-service-mxhwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=086fb3bec9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=337 identity=42284 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-service-mxhwp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.167 0e3d0fa6-2290-4a01-aeac-6e3c7f0fbef7 default }" containerID=d239b679eacf805d0b9ccd1280b27fbb4cd3c06bc1a914ccb84c8af5f361a46f datapathConfiguration="&{false false false false false }" interface=lxc755825c48b99 k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-jqzv9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d239b679ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2081 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-jqzv9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d239b679ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2081 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-jqzv9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d239b679ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2081 identity=8802 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-jqzv9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d239b679ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2081 identity=8802 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-jqzv9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.11 7dc4ed06-06c6-4c24-95f4-0315e058a67a default }" containerID=395b8089c7731d97c78e12b653e2d0d79af49dd17e735af99488bda7a0f64aa2 datapathConfiguration="&{false false false false false }" interface=lxc6b1f67898a89 k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-2bdqh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=395b8089c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1021 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-2bdqh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=395b8089c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1021 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-2bdqh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=395b8089c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1021 identity=38704 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-2bdqh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=395b8089c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1021 identity=38704 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-2bdqh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d239b679ea datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2081 identity=8802 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-jqzv9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d239b679ea datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2081 identity=8802 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-jqzv9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=395b8089c7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1021 identity=38704 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-2bdqh subsys=endpoint level=info msg="Successful endpoint creation" containerID=395b8089c7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1021 identity=38704 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-2bdqh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=086fb3bec9 endpointID=337 k8sNamespace=openstack k8sPodName=glance-ks-service-mxhwp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=919e8932-b257-4470-a611-85ccbf983848 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=919e8932-b257-4470-a611-85ccbf983848 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=086fb3bec9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=337 identity=42284 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-service-mxhwp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 138578b8-d74d-48e7-9a3a-b9889d2331e9 default }" containerID=861d0000205cba7d1d61baacd7c2b11a47974b961c8aea98055ab0e2c3bc522c datapathConfiguration="&{false false false false false }" interface=lxc892f7577dd89 k8sPodName=openstack/glance-ks-endpoints-4r9l8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=861d000020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-endpoints-4r9l8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=861d000020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cb8d1de6-d58c-4a1d-a3b3-3b0647d2e3e4,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cb8d1de6-d58c-4a1d-a3b3-3b0647d2e3e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-endpoints-4r9l8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cb8d1de6-d58c-4a1d-a3b3-3b0647d2e3e4;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=cb8d1de6-d58c-4a1d-a3b3-3b0647d2e3e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=861d000020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 identity=41079 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cb8d1de6-d58c-4a1d-a3b3-3b0647d2e3e4,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cb8d1de6-d58c-4a1d-a3b3-3b0647d2e3e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-endpoints-4r9l8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=861d000020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 identity=41079 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-endpoints-4r9l8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=861d000020 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3914 identity=41079 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-endpoints-4r9l8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=861d000020 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3914 identity=41079 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-endpoints-4r9l8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.172 6e0219b5-6e50-41ce-ab22-d6b4f2bfe514 default }" containerID=df2697976111b61aacaaf18f5db90e1f35b337f75f7b54f41ef21fdd7d0345d1 datapathConfiguration="&{false false false false false }" interface=lxc3ccc9d0706e3 k8sPodName=openstack/ceph-object-controller-detect-version-c5sg6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df26979761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-c5sg6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df26979761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=19bbc57e-454d-4ff5-bf6f-9ed9237ac116,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=19bbc57e-454d-4ff5-bf6f-9ed9237ac116,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-c5sg6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=19bbc57e-454d-4ff5-bf6f-9ed9237ac116;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=19bbc57e-454d-4ff5-bf6f-9ed9237ac116;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df26979761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identity=10410 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=19bbc57e-454d-4ff5-bf6f-9ed9237ac116,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=19bbc57e-454d-4ff5-bf6f-9ed9237ac116,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-c5sg6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df26979761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identity=10410 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-c5sg6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=df26979761 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=503 identity=10410 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-c5sg6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=df26979761 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=503 identity=10410 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-c5sg6 subsys=daemon level=info msg="Delete endpoint request" containerID=861d000020 endpointID=3914 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-4r9l8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cb8d1de6-d58c-4a1d-a3b3-3b0647d2e3e4 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=cb8d1de6-d58c-4a1d-a3b3-3b0647d2e3e4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=861d000020 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3914 identity=41079 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-endpoints-4r9l8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df26979761 endpointID=503 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-c5sg6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=19bbc57e-454d-4ff5-bf6f-9ed9237ac116 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=19bbc57e-454d-4ff5-bf6f-9ed9237ac116 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=df26979761 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=503 identity=10410 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-c5sg6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 f659d215-eeee-47de-9b7d-1e645f33a812 default }" containerID=2abd511bf572fd30504f0e6a20e6883354380a2f70fbb27efbf603a01ea9a721 datapathConfiguration="&{false false false false false }" interface=lxc459bfc2af0b8 k8sPodName=openstack/glance-ks-user-tv2x9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2abd511bf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=844 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-user-tv2x9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2abd511bf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=844 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=49f7da97-0064-4606-b550-7e958b26d9c0,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=49f7da97-0064-4606-b550-7e958b26d9c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-user-tv2x9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=49f7da97-0064-4606-b550-7e958b26d9c0;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=49f7da97-0064-4606-b550-7e958b26d9c0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2abd511bf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=844 identity=26327 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=49f7da97-0064-4606-b550-7e958b26d9c0,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=49f7da97-0064-4606-b550-7e958b26d9c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-user-tv2x9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2abd511bf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=844 identity=26327 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-user-tv2x9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2abd511bf5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=844 identity=26327 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-user-tv2x9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2abd511bf5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=844 identity=26327 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-user-tv2x9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2abd511bf5 endpointID=844 k8sNamespace=openstack k8sPodName=glance-ks-user-tv2x9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=49f7da97-0064-4606-b550-7e958b26d9c0 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=49f7da97-0064-4606-b550-7e958b26d9c0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2abd511bf5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=844 identity=26327 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-ks-user-tv2x9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 46967584-8fd8-49d4-985a-73796ab81ff6 default }" containerID=b7d137085c482fa0bb345e46044e434037df9b4b2eb7960d42851b39a4f4b541 datapathConfiguration="&{false false false false false }" interface=lxc2eb32f32c28f k8sPodName=openstack/glance-metadefs-load-v4pr5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7d137085c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-metadefs-load-v4pr5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7d137085c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ff58abf7-fffa-486f-81de-ca6b2b972125,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=ff58abf7-fffa-486f-81de-ca6b2b972125,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-metadefs-load-v4pr5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ff58abf7-fffa-486f-81de-ca6b2b972125;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=ff58abf7-fffa-486f-81de-ca6b2b972125;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7d137085c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identity=58881 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ff58abf7-fffa-486f-81de-ca6b2b972125,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=ff58abf7-fffa-486f-81de-ca6b2b972125,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-metadefs-load-v4pr5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b7d137085c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identity=58881 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-metadefs-load-v4pr5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7d137085c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=803 identity=58881 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-metadefs-load-v4pr5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7d137085c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=803 identity=58881 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-metadefs-load-v4pr5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b7d137085c endpointID=803 k8sNamespace=openstack k8sPodName=glance-metadefs-load-v4pr5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ff58abf7-fffa-486f-81de-ca6b2b972125 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=ff58abf7-fffa-486f-81de-ca6b2b972125 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b7d137085c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=803 identity=58881 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-metadefs-load-v4pr5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 b0ca40d0-4a70-4e6f-a4ba-1b9bceaf0734 default }" containerID=0a2b0c51e628d9b1cf8c971b13e58f6da6f8ed668d3a1eea1c8d7950cc4a8b32 datapathConfiguration="&{false false false false false }" interface=lxc21e114f45bb0 k8sPodName=openstack/glance-storage-init-ks8jb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a2b0c51e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-storage-init-ks8jb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a2b0c51e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=addd8f88-66ef-4755-aab1-5ace1e88e2c1,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=addd8f88-66ef-4755-aab1-5ace1e88e2c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-storage-init-ks8jb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0a2b0c51e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-storage-init-ks8jb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=addd8f88-66ef-4755-aab1-5ace1e88e2c1;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=addd8f88-66ef-4755-aab1-5ace1e88e2c1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a2b0c51e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 identity=18451 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=addd8f88-66ef-4755-aab1-5ace1e88e2c1,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=addd8f88-66ef-4755-aab1-5ace1e88e2c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-storage-init-ks8jb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a2b0c51e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 identity=18451 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-storage-init-ks8jb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a2b0c51e6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3585 identity=18451 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-storage-init-ks8jb subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a2b0c51e6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3585 identity=18451 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-storage-init-ks8jb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0a2b0c51e6 endpointID=3585 k8sNamespace=openstack k8sPodName=glance-storage-init-ks8jb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=addd8f88-66ef-4755-aab1-5ace1e88e2c1 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=addd8f88-66ef-4755-aab1-5ace1e88e2c1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0a2b0c51e6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3585 identity=18451 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-storage-init-ks8jb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 36521f95-d4b1-4059-a4a2-7c104a1cc551 default }" containerID=d2c7defb1e5da9eb8b493fde053db9ac5167cfea0d7d88664d2257e3803256d4 datapathConfiguration="&{false false false false false }" interface=lxc74ce64b7a8d2 k8sPodName=openstack/glance-api-85559f56b5-55q52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2c7defb1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/glance-api-85559f56b5-55q52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2c7defb1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/glance-api-85559f56b5-55q52 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2c7defb1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identity=65006 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/glance-api-85559f56b5-55q52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2c7defb1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identity=65006 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/glance-api-85559f56b5-55q52 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d2c7defb1e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=137 identity=65006 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/glance-api-85559f56b5-55q52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2c7defb1e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=137 identity=65006 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/glance-api-85559f56b5-55q52 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 6d1f1822-0391-473d-a75f-06ccbabe46ee default }" containerID=fd9856f8b4bc9618efd42f964f344bb12405261d487fc3e33e83ec0bc939d399 datapathConfiguration="&{false false false false false }" interface=lxce58186a0b0cb k8sPodName=openstack/staffeln-conductor-75bd7c5dcb-g4j9k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd9856f8b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-conductor-75bd7c5dcb-g4j9k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 950daebd-9064-4c5b-b6ab-711db300b08d default }" containerID=367428bfd3b773470931f83780fdef80f66901845521ff0026a4c5df1970b558 datapathConfiguration="&{false false false false false }" interface=lxc0f9a8bd53baf k8sPodName=openstack/staffeln-api-b756f59f-tvblf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=367428bfd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-api-b756f59f-tvblf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd9856f8b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-conductor-75bd7c5dcb-g4j9k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=367428bfd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-api-b756f59f-tvblf subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=fd9856f8b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identity=431 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-conductor-75bd7c5dcb-g4j9k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd9856f8b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identity=431 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-conductor-75bd7c5dcb-g4j9k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=367428bfd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-api-b756f59f-tvblf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=367428bfd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identity=46127 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-api-b756f59f-tvblf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=367428bfd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identity=46127 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-api-b756f59f-tvblf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 cfd2c71a-966d-4d54-8139-4398c803e1e5 default }" containerID=e5a4f75a6856d291cc7932acbb35410a0512dcfc77b54716baf2f9f7209235a0 datapathConfiguration="&{false false false false false }" interface=lxc8ef88d6748a3 k8sPodName=openstack/staffeln-db-init-hsm94 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5a4f75a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=910 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-init-hsm94 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5a4f75a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=910 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=89d604f6-e4ae-41e9-818b-4f145f6a62e8,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=89d604f6-e4ae-41e9-818b-4f145f6a62e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-init-hsm94 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=89d604f6-e4ae-41e9-818b-4f145f6a62e8;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=89d604f6-e4ae-41e9-818b-4f145f6a62e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5a4f75a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=910 identity=26806 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=89d604f6-e4ae-41e9-818b-4f145f6a62e8,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=89d604f6-e4ae-41e9-818b-4f145f6a62e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-init-hsm94 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5a4f75a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=910 identity=26806 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-init-hsm94 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd9856f8b4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=418 identity=431 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-conductor-75bd7c5dcb-g4j9k subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd9856f8b4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=418 identity=431 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-conductor-75bd7c5dcb-g4j9k subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=367428bfd3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=526 identity=46127 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-api-b756f59f-tvblf subsys=endpoint level=info msg="Successful endpoint creation" containerID=367428bfd3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=526 identity=46127 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-api-b756f59f-tvblf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e5a4f75a68 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=910 identity=26806 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-init-hsm94 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5a4f75a68 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=910 identity=26806 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-init-hsm94 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e5a4f75a68 endpointID=910 k8sNamespace=openstack k8sPodName=staffeln-db-init-hsm94 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=89d604f6-e4ae-41e9-818b-4f145f6a62e8 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=89d604f6-e4ae-41e9-818b-4f145f6a62e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=e5a4f75a68 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=910 identity=26806 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-init-hsm94 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 1148ab4c-50f4-4dd9-8777-e6d2a6ae8dc5 default }" containerID=a24b772f8006c8688646a1d53f84ecd35c782b16bf464ffc88c5f7d3a5c7b437 datapathConfiguration="&{false false false false false }" interface=lxcf99ec1a8a5fe k8sPodName=openstack/staffeln-db-sync-jhnwn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a24b772f80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3838 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-db-sync-jhnwn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a24b772f80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3838 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=2e3391b4-a3a6-4a8b-8a9c-994445fd5b3f,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=2e3391b4-a3a6-4a8b-8a9c-994445fd5b3f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-db-sync-jhnwn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a24b772f80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3838 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-db-sync-jhnwn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=2e3391b4-a3a6-4a8b-8a9c-994445fd5b3f;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=2e3391b4-a3a6-4a8b-8a9c-994445fd5b3f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a24b772f80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3838 identity=12640 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=2e3391b4-a3a6-4a8b-8a9c-994445fd5b3f,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=2e3391b4-a3a6-4a8b-8a9c-994445fd5b3f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-db-sync-jhnwn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a24b772f80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3838 identity=12640 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-db-sync-jhnwn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a24b772f80 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3838 identity=12640 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-db-sync-jhnwn subsys=endpoint level=info msg="Successful endpoint creation" containerID=a24b772f80 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3838 identity=12640 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-db-sync-jhnwn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager