level=info msg="Memory available for map entries (0.003% of 67421646848B): 168554117B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="849.206µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="50.291µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="818.766µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.191µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=98.616062ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="17.63µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="21.47µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="70.272µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="77.612µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="90.592µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="678.812µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.43µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=9.037575ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.993104ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="34.48µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="39.99µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="221.234µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="91.862µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="59.041µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=41.726095ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="127.022µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="9.13µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.14µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.115.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.787692ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.53µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.863285ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.8µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.55303ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="2.39µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.04µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.28µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.39µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="61.601µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="14.311µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="40.811µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="195.673µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="1.921µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.3µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="121.382µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="595.771µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="696.834µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="2.88µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="11.69µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.115 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.115 ipAddr.ipv6="" k8sNodeIP=199.204.45.115 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.115" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.166" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.115" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.115} {CiliumInternalIP 10.0.0.166}] 10.0.0.0/24 [] [] 10.0.0.235 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:38983" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.609090598s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="31.241µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="10.87µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="49.581µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="5.3µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.547850967s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=283.985652ms file-path=/var/run/cilium/state/templates/e5359e908e317c7d7f18b8a66d68f5e1c26f32d22eba69a0afa9a18ea3356c26/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3941 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 38afb4df-5004-46c9-86c8-9aaf98fc1a48 default }" containerID=13529586c17bceb218ec6bbfe3a67c60432bc544516c2e95ca4f55565e254bea datapathConfiguration="&{false false false false false }" interface=lxcecf566a1a340 k8sPodName=kube-system/coredns-7c96b6546b-bjh4c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13529586c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bjh4c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13529586c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bjh4c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13529586c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identity=4327 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bjh4c oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=13529586c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identity=4327 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bjh4c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 23105052-4821-4e53-b68d-68514d974d4d default }" containerID=fba43ab3cedec58d652b32d5ca1ec4f121072a2f6cb7596601f07ed5e867c36e datapathConfiguration="&{false false false false false }" interface=lxcded1f16e6d5d k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-8zzls labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fba43ab3ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 ipv4=10.0.0.197 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-8zzls subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fba43ab3ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=7103980a-d444-422a-8ba5-c150b78b0376,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=7103980a-d444-422a-8ba5-c150b78b0376,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.197 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-8zzls subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=7103980a-d444-422a-8ba5-c150b78b0376;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=7103980a-d444-422a-8ba5-c150b78b0376;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fba43ab3ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 identity=63816 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=7103980a-d444-422a-8ba5-c150b78b0376,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=7103980a-d444-422a-8ba5-c150b78b0376,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.197 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-8zzls oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fba43ab3ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 identity=63816 ipv4=10.0.0.197 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-8zzls subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3504 ipv4=10.0.0.235 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3504 identityLabels="reserved:health" ipv4=10.0.0.235 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3504 identity=4 identityLabels="reserved:health" ipv4=10.0.0.235 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.056042424s file-path=/var/run/cilium/state/templates/44bdfc1f83f656a5e145677a9a169672cfc9eef793987ebb48fedf8098817381/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=13529586c1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=926 identity=4327 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bjh4c subsys=endpoint level=info msg="Successful endpoint creation" containerID=13529586c1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=926 identity=4327 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bjh4c subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3504 identity=4 ipv4=10.0.0.235 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fba43ab3ce datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1797 identity=63816 ipv4=10.0.0.197 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-8zzls subsys=endpoint level=info msg="Successful endpoint creation" containerID=fba43ab3ce datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1797 identity=63816 ipv4=10.0.0.197 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-8zzls subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fba43ab3ce endpointID=1797 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-8zzls subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=7103980a-d444-422a-8ba5-c150b78b0376 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=7103980a-d444-422a-8ba5-c150b78b0376 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=fba43ab3ce datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1797 identity=63816 ipv4=10.0.0.197 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-8zzls subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 72bf1ebf-dff3-405e-8e23-f2394c15329f default }" containerID=255c60472df662d7494895e40f4650da9d08b01f1a677ebffb50ac5a2327fa04 datapathConfiguration="&{false false false false false }" interface=lxcc6ff1595984d k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bbmwx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=255c60472d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 ipv4=10.0.0.15 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bbmwx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=255c60472d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.15 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bbmwx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=255c60472d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.15 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bbmwx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=255c60472d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identity=10049 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.15 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bbmwx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=255c60472d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identity=10049 ipv4=10.0.0.15 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bbmwx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=255c60472d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=958 identity=10049 ipv4=10.0.0.15 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bbmwx subsys=endpoint level=info msg="Successful endpoint creation" containerID=255c60472d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=958 identity=10049 ipv4=10.0.0.15 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bbmwx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3941 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03941 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03941 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03941 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03941:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3941 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 5ff5061c-d763-4103-91a8-f96254f9ef86 default }" containerID=5fd780527edce22ac53a09dc93c27cdd4127a6e49f315d50612fb224fe46b49f datapathConfiguration="&{false false false false false }" interface=lxc139d4c453137 k8sPodName=kube-system/coredns-67659f764b-9qm6r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5fd780527e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 ipv4=10.0.0.131 ipv6= k8sPodName=kube-system/coredns-67659f764b-9qm6r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 03a47d35-a66d-4793-b6c1-04d9d0be0e47 default }" containerID=f19e6742a76ee96fa5ea1ae89ad24711a697806b4563194ceff6de0fba9c3c5c datapathConfiguration="&{false false false false false }" interface=lxcee9a28a9fc42 k8sPodName=kube-system/coredns-67659f764b-ckqx5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f19e6742a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 ipv4=10.0.0.231 ipv6= k8sPodName=kube-system/coredns-67659f764b-ckqx5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5fd780527e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.131 ipv6= k8sPodName=kube-system/coredns-67659f764b-9qm6r subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5fd780527e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 identity=4327 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.131 ipv6= k8sPodName=kube-system/coredns-67659f764b-9qm6r oldIdentity="no identity" subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f19e6742a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.231 ipv6= k8sPodName=kube-system/coredns-67659f764b-ckqx5 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5fd780527e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 identity=4327 ipv4=10.0.0.131 ipv6= k8sPodName=kube-system/coredns-67659f764b-9qm6r subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f19e6742a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identity=4327 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.231 ipv6= k8sPodName=kube-system/coredns-67659f764b-ckqx5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f19e6742a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identity=4327 ipv4=10.0.0.231 ipv6= k8sPodName=kube-system/coredns-67659f764b-ckqx5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5fd780527e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2239 identity=4327 ipv4=10.0.0.131 ipv6= k8sPodName=kube-system/coredns-67659f764b-9qm6r subsys=endpoint level=info msg="Successful endpoint creation" containerID=5fd780527e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2239 identity=4327 ipv4=10.0.0.131 ipv6= k8sPodName=kube-system/coredns-67659f764b-9qm6r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f19e6742a7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=741 identity=4327 ipv4=10.0.0.231 ipv6= k8sPodName=kube-system/coredns-67659f764b-ckqx5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f19e6742a7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=741 identity=4327 ipv4=10.0.0.231 ipv6= k8sPodName=kube-system/coredns-67659f764b-ckqx5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.96 22f282b7-5526-464d-8f00-91b47774aada default }" containerID=24c7d36de4419ff88423d7915f731df610d371b4f6999d2d0f35b0ac3163c354 datapathConfiguration="&{false false false false false }" interface=lxc18de36316d34 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wlglk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24c7d36de4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 ipv4=10.0.0.96 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wlglk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24c7d36de4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.96 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wlglk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24c7d36de4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 identity=20320 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.96 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wlglk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24c7d36de4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 identity=20320 ipv4=10.0.0.96 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wlglk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=24c7d36de4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2767 identity=20320 ipv4=10.0.0.96 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wlglk subsys=endpoint level=info msg="Successful endpoint creation" containerID=24c7d36de4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2767 identity=20320 ipv4=10.0.0.96 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wlglk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=13529586c1 endpointID=926 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-bjh4c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=13529586c1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=926 identity=4327 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bjh4c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 6b8d8991-d468-4c76-b663-c0f8a88e5dd2 default }" containerID=faaf9eb1e58e38010bed5fc40fd603f26b68b9d02c8d2fed618cbcf059556cf0 datapathConfiguration="&{false false false false false }" interface=lxc4dee87a378e7 k8sPodName=cert-manager/cert-manager-75c4c745bc-52g2q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=faaf9eb1e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-52g2q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=faaf9eb1e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-52g2q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=faaf9eb1e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 identity=7267 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-52g2q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=faaf9eb1e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 identity=7267 ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-52g2q subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.208 d116b37f-5d92-42a3-99b8-5ab8c1b61634 default }" containerID=e699e16e3d2cdd81813eefd4d3aa99d3215a5b7f5c657c6a8b21d88c7ef6227e datapathConfiguration="&{false false false false false }" interface=lxcf691be2e0a27 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-mplrq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e699e16e3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 ipv4=10.0.0.208 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-mplrq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e699e16e3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.208 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-mplrq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 dfa99010-3dd2-44ad-a33f-119d658eaea0 default }" containerID=6c080c2d59f9d6e2a9f0103690d511656aa4c683388c1a7b3212275b39b9d11f datapathConfiguration="&{false false false false false }" interface=lxc75b793213f35 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g84hz labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=6c080c2d59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g84hz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c080c2d59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g84hz subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=e699e16e3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identity=50724 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.208 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-mplrq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e699e16e3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identity=50724 ipv4=10.0.0.208 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-mplrq subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c080c2d59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=34500 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g84hz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c080c2d59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=34500 ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g84hz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=faaf9eb1e5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1297 identity=7267 ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-52g2q subsys=endpoint level=info msg="Successful endpoint creation" containerID=faaf9eb1e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1297 identity=7267 ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-52g2q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e699e16e3d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1518 identity=50724 ipv4=10.0.0.208 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-mplrq subsys=endpoint level=info msg="Successful endpoint creation" containerID=e699e16e3d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1518 identity=50724 ipv4=10.0.0.208 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-mplrq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6c080c2d59 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=10 identity=34500 ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g84hz subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c080c2d59 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=10 identity=34500 ipv4=10.0.0.83 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g84hz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.60 babb5ad3-3214-429c-866c-72206cddfbeb default }" containerID=b749d093b4d095cf346b2239727ce88d3411cee2ae85c7d2cb41cb48ef802819 datapathConfiguration="&{false false false false false }" interface=lxc58299742df72 k8sPodName=cert-manager/cert-manager-startupapicheck-z95sk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b749d093b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-z95sk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b749d093b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=e8ed9495-c6ec-4d3f-a773-df3a7f1c90aa,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=e8ed9495-c6ec-4d3f-a773-df3a7f1c90aa,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-z95sk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=e8ed9495-c6ec-4d3f-a773-df3a7f1c90aa;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=e8ed9495-c6ec-4d3f-a773-df3a7f1c90aa;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b749d093b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identity=60140 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=e8ed9495-c6ec-4d3f-a773-df3a7f1c90aa,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=e8ed9495-c6ec-4d3f-a773-df3a7f1c90aa,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-z95sk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b749d093b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identity=60140 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-z95sk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b749d093b4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=137 identity=60140 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-z95sk subsys=endpoint level=info msg="Successful endpoint creation" containerID=b749d093b4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=137 identity=60140 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-z95sk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b749d093b4 endpointID=137 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-z95sk subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=e8ed9495-c6ec-4d3f-a773-df3a7f1c90aa k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=e8ed9495-c6ec-4d3f-a773-df3a7f1c90aa k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=b749d093b4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=137 identity=60140 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-z95sk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 4ba73b54-5bf8-4123-91c3-d4f3957adf54 default }" containerID=39e833fb89bf593693b53d0c44e9aed762e9e74bb8bbd8dbe9d5021568f9eaa0 datapathConfiguration="&{false false false false false }" interface=lxc524b2a296c68 k8sPodName=ingress-nginx/ingress-nginx-admission-create-h55gb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39e833fb89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=321 ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h55gb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39e833fb89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=321 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4c40520f-995b-40a6-b365-d3f66c6d7fae,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=4c40520f-995b-40a6-b365-d3f66c6d7fae,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h55gb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=4c40520f-995b-40a6-b365-d3f66c6d7fae;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=4c40520f-995b-40a6-b365-d3f66c6d7fae;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39e833fb89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=321 identity=8689 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4c40520f-995b-40a6-b365-d3f66c6d7fae,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=4c40520f-995b-40a6-b365-d3f66c6d7fae,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h55gb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=39e833fb89 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=321 identity=8689 ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h55gb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39e833fb89 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=321 identity=8689 ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h55gb subsys=endpoint level=info msg="Successful endpoint creation" containerID=39e833fb89 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=321 identity=8689 ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h55gb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=39e833fb89 endpointID=321 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-h55gb subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=4c40520f-995b-40a6-b365-d3f66c6d7fae k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=4c40520f-995b-40a6-b365-d3f66c6d7fae k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=39e833fb89 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=321 identity=8689 ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h55gb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 5213786e-157b-4356-accf-35186dc4ce42 default }" containerID=f2e889db9a9bd5c31f63af5903fe7f2a68272e75705b76bd6940265500d98798 datapathConfiguration="&{false false false false false }" interface=lxc7c73dbc9283e k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6sqw6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2e889db9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 ipv4=10.0.0.26 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6sqw6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2e889db9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.26 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6sqw6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2e889db9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identity=7384 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.26 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6sqw6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f2e889db9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identity=7384 ipv4=10.0.0.26 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6sqw6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2e889db9a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=720 identity=7384 ipv4=10.0.0.26 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6sqw6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2e889db9a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=720 identity=7384 ipv4=10.0.0.26 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6sqw6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.188 531be6ab-b80f-4c5a-b3ab-05323d29cf77 default }" containerID=ac25a3c53811afceca41dc77e03fc04f1cab4b3722bb68798981f47c6dd13f86 datapathConfiguration="&{false false false false false }" interface=lxc53503db8326a k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6zt9q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac25a3c538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6zt9q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac25a3c538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=58773a01-7800-4797-b011-f2170656be35,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=58773a01-7800-4797-b011-f2170656be35,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6zt9q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=58773a01-7800-4797-b011-f2170656be35;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=58773a01-7800-4797-b011-f2170656be35;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac25a3c538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=10277 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=58773a01-7800-4797-b011-f2170656be35,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=58773a01-7800-4797-b011-f2170656be35,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6zt9q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac25a3c538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=10277 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6zt9q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ac25a3c538 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=14 identity=10277 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6zt9q subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac25a3c538 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=14 identity=10277 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6zt9q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ac25a3c538 endpointID=14 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-6zt9q subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=58773a01-7800-4797-b011-f2170656be35 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=58773a01-7800-4797-b011-f2170656be35 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=ac25a3c538 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=14 identity=10277 ipv4=10.0.0.188 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6zt9q subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=65620844-c337-45e0-b8f9-b0c2624665df] Description:}]" policyAddRequest=13e35328-53a2-4799-ba71-b9b2310aa888 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=13e35328-53a2-4799-ba71-b9b2310aa888 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=fc9d7a06-4088-46de-a055-229dc488c1f6] Description:}]" policyAddRequest=246e6503-e1e8-4646-bc95-b9095ab5a81f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=246e6503-e1e8-4646-bc95-b9095ab5a81f policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.246 85b060a1-d6a3-410c-b296-0add4e576636 default }" containerID=728e019c08ecdb8d5aa9ee05cd748a9701c9ac47130b4298b4987de92cdf1efb datapathConfiguration="&{false false false false false }" interface=lxcc65046cbb7b6 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-jw9ds labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=728e019c08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-jw9ds subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=728e019c08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-jw9ds subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=728e019c08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 identity=46283 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-jw9ds oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=728e019c08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 identity=46283 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-jw9ds subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=728e019c08 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=610 identity=46283 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-jw9ds subsys=endpoint level=info msg="Successful endpoint creation" containerID=728e019c08 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=610 identity=46283 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-jw9ds subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.176 d3729d12-1a7f-41d6-9d02-58959a5fd687 default }" containerID=7886e7ef3be094a0bf743d330b490c1133ea0b4bf5716227520f69e9dccf154b datapathConfiguration="&{false false false false false }" interface=lxcf2fd04b3a7ea k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-rz72v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7886e7ef3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=422 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-rz72v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7886e7ef3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=422 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-rz72v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7886e7ef3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=422 identity=10812 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-rz72v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7886e7ef3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=422 identity=10812 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-rz72v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7886e7ef3b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=422 identity=10812 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-rz72v subsys=endpoint level=info msg="Successful endpoint creation" containerID=7886e7ef3b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=422 identity=10812 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-rz72v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.63 34747018-2a1d-45f9-9293-85c233340d6b default }" containerID=a71047114ad6aa27978b5b761368876532336ad8f2dbff22955b7ef4c6cfc6c4 datapathConfiguration="&{false false false false false }" interface=lxc7491dea9a8af k8sPodName=openstack/pxc-operator-7cff949c8b-25n4b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a71047114a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-25n4b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a71047114a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-25n4b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a71047114a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 identity=53699 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-25n4b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a71047114a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 identity=53699 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-25n4b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a71047114a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=372 identity=53699 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-25n4b subsys=endpoint level=info msg="Successful endpoint creation" containerID=a71047114a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=372 identity=53699 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-25n4b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.62 421a84a2-e22b-4988-b22d-0719ebb6d6c6 default }" containerID=68725639f98cb42d2f52ad467eea01382df409014de2deffec72c631498ac0a3 datapathConfiguration="&{false false false false false }" interface=lxcf1eb6f156a6f k8sPodName=local-path-storage/helper-pod-create-pvc-b44f6d79-bf75-4c1d-b6cd-7dff63651d16 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68725639f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b44f6d79-bf75-4c1d-b6cd-7dff63651d16 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68725639f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b44f6d79-bf75-4c1d-b6cd-7dff63651d16 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68725639f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 identity=29252 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b44f6d79-bf75-4c1d-b6cd-7dff63651d16 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=68725639f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 identity=29252 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b44f6d79-bf75-4c1d-b6cd-7dff63651d16 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68725639f9 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3646 identity=29252 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b44f6d79-bf75-4c1d-b6cd-7dff63651d16 subsys=endpoint level=info msg="Successful endpoint creation" containerID=68725639f9 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3646 identity=29252 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b44f6d79-bf75-4c1d-b6cd-7dff63651d16 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.139 2105690b-83d9-4586-8388-ac252d2b338b default }" containerID=9c111fa18dff275674087114b1bca2e673ddcda58df79db4d0574e236548bc2e datapathConfiguration="&{false false false false false }" interface=lxcd430caceb4c5 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c111fa18d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c111fa18d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c111fa18d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 identity=38453 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c111fa18d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 identity=38453 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c111fa18d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2655 identity=38453 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c111fa18d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2655 identity=38453 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=68725639f9 endpointID=3646 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b44f6d79-bf75-4c1d-b6cd-7dff63651d16 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=68725639f9 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3646 identity=29252 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b44f6d79-bf75-4c1d-b6cd-7dff63651d16 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 76f58a19-796f-4686-9d97-e577d660922d default }" containerID=e06d4039efe0e875ffaa32e7e49bff2ff4a0c78f335341d45ea88f03f4abfdba datapathConfiguration="&{false false false false false }" interface=lxcc428f8b1319e k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e06d4039ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2961 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e06d4039ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2961 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e06d4039ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2961 identity=41585 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e06d4039ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2961 identity=41585 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e06d4039ef datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2961 identity=41585 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e06d4039ef datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2961 identity=41585 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=42a87f4f-7c5d-41f1-b8cf-ad6ebe9367cf] Description:}]" policyAddRequest=e76fe857-250b-489f-a589-9911f1834ffe subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=e76fe857-250b-489f-a589-9911f1834ffe policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.201 689c4afa-3a1f-4847-a32e-e82b23f77362 default }" containerID=eb67b3a744b18c405e0d0da7feb394cdd8d13960aed74afbf6acef36fbb262a5 datapathConfiguration="&{false false false false false }" interface=lxc98307f4ffdb9 k8sPodName=local-path-storage/helper-pod-create-pvc-e2241433-2ecd-4655-9cf6-93f60dc5bf45 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb67b3a744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2241433-2ecd-4655-9cf6-93f60dc5bf45 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb67b3a744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2241433-2ecd-4655-9cf6-93f60dc5bf45 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb67b3a744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=29252 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2241433-2ecd-4655-9cf6-93f60dc5bf45 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb67b3a744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=29252 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2241433-2ecd-4655-9cf6-93f60dc5bf45 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb67b3a744 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=59 identity=29252 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2241433-2ecd-4655-9cf6-93f60dc5bf45 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb67b3a744 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=59 identity=29252 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2241433-2ecd-4655-9cf6-93f60dc5bf45 subsys=daemon level=info msg="Delete endpoint request" containerID=eb67b3a744 endpointID=59 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e2241433-2ecd-4655-9cf6-93f60dc5bf45 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=eb67b3a744 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=59 identity=29252 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e2241433-2ecd-4655-9cf6-93f60dc5bf45 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 0da9bbe0-f491-4e69-a708-71beab949ab5 default }" containerID=aeb2dbbdca22d6cabf274a502f337204e7e17d9ed7d8fa620f3a8c228f77a8cb datapathConfiguration="&{false false false false false }" interface=lxc4b7c3fa85c42 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aeb2dbbdca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aeb2dbbdca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aeb2dbbdca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 identity=2537 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aeb2dbbdca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 identity=2537 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aeb2dbbdca datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=208 identity=2537 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aeb2dbbdca datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=208 identity=2537 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=a62161c6-1496-4597-8007-e7c96edccffa] Description:}]" policyAddRequest=05c71d08-dfad-4103-8d24-97d7f9b4febf subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=05c71d08-dfad-4103-8d24-97d7f9b4febf policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.81 1780606f-80b3-4978-871c-fa07daace615 default }" containerID=7674f8415f1d733699ab4bfcd3c5963874a6487fa13b8d25c4574aa0e69d5ddc datapathConfiguration="&{false false false false false }" interface=lxc0821207e1ed7 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7674f8415f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=602 ipv4=10.0.0.81 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7674f8415f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=602 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.81 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7674f8415f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=602 identity=9071 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.81 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7674f8415f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=602 identity=9071 ipv4=10.0.0.81 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7674f8415f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=602 identity=9071 ipv4=10.0.0.81 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7674f8415f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=602 identity=9071 ipv4=10.0.0.81 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010080890608302785 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.151 1dc601ea-7598-4efb-b8db-06c3a5e5584c default }" containerID=e3bed18dc3787df2e1eee90ed7928070769c403b401592c24583e47ea64b14c5 datapathConfiguration="&{false false false false false }" interface=lxca4667f935cd6 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-48bqq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3bed18dc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-48bqq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3bed18dc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-48bqq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e3bed18dc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 identity=39370 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-48bqq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3bed18dc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 identity=39370 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-48bqq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 41e90ef9-5613-4d52-bd27-ae5ec54542ba default }" containerID=307eb7ee9be4b906b3f954f7d141a38dc31a4c61908719d0721173c53774810f datapathConfiguration="&{false false false false false }" interface=lxc7c68f1d0d3f3 k8sPodName=monitoring/node-feature-discovery-worker-9dczh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=307eb7ee9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9dczh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=307eb7ee9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9dczh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=307eb7ee9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 identity=15493 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9dczh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=307eb7ee9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 identity=15493 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9dczh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 f3c2bdba-fe27-4e76-a54f-0cdedbb1be86 default }" containerID=f152cd3a43b8a100ddd46635d12898ad2322883faa928f6b56f34e01c70fa81e datapathConfiguration="&{false false false false false }" interface=lxcd7bb7f5c66f8 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zpcx9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f152cd3a43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2822 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zpcx9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f152cd3a43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2822 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zpcx9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f152cd3a43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2822 identity=13590 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zpcx9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f152cd3a43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2822 identity=13590 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zpcx9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3bed18dc3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2057 identity=39370 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-48bqq subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3bed18dc3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2057 identity=39370 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-48bqq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=307eb7ee9b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1137 identity=15493 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9dczh subsys=endpoint level=info msg="Successful endpoint creation" containerID=307eb7ee9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1137 identity=15493 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9dczh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f152cd3a43 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2822 identity=13590 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zpcx9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f152cd3a43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2822 identity=13590 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zpcx9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.79 2e43bbc9-2b0d-4323-9a5a-015eb15ca8ce default }" containerID=a4bdb4fb50a639ca9921579c7edeb9c655f51110740a546a9ac958993b536d3b datapathConfiguration="&{false false false false false }" interface=lxcc304d86a91b3 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lps59 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4bdb4fb50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 ipv4=10.0.0.79 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lps59 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4bdb4fb50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.79 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lps59 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4bdb4fb50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 identity=12237 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.79 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lps59 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4bdb4fb50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1900 identity=12237 ipv4=10.0.0.79 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lps59 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a4bdb4fb50 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1900 identity=12237 ipv4=10.0.0.79 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lps59 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4bdb4fb50 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1900 identity=12237 ipv4=10.0.0.79 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lps59 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3941 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03941 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03941 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03941 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03941:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3941 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 aaa686f0-3c4a-4d91-8dbb-9d71a6677c1d default }" containerID=b4923d157160c7be137f2035ebcda453d2ef04a9ef99638519e7c3a2920d9447 datapathConfiguration="&{false false false false false }" interface=lxc90fcd9fa1743 k8sPodName=monitoring/kube-prometheus-stack-admission-create-6zlr2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4923d1571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1596 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6zlr2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4923d1571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1596 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=91dcbc34-11c8-4b99-b5db-37a5e562eeb1,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=91dcbc34-11c8-4b99-b5db-37a5e562eeb1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6zlr2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=91dcbc34-11c8-4b99-b5db-37a5e562eeb1;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=91dcbc34-11c8-4b99-b5db-37a5e562eeb1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4923d1571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1596 identity=35752 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=91dcbc34-11c8-4b99-b5db-37a5e562eeb1,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=91dcbc34-11c8-4b99-b5db-37a5e562eeb1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6zlr2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b4923d1571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1596 identity=35752 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6zlr2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4923d1571 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1596 identity=35752 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6zlr2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4923d1571 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1596 identity=35752 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6zlr2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b4923d1571 endpointID=1596 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-6zlr2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=91dcbc34-11c8-4b99-b5db-37a5e562eeb1 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=91dcbc34-11c8-4b99-b5db-37a5e562eeb1 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=b4923d1571 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1596 identity=35752 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6zlr2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 5af0ea73-9cac-4369-993c-6a1e3d185aee default }" containerID=9be51241206733c43aca0dd703769d1d3e7f6494f2844346e66690bcf8b92854 datapathConfiguration="&{false false false false false }" interface=lxc8db3cc9f75dd k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-hv6qd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9be5124120 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2522 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-hv6qd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9be5124120 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2522 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-hv6qd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9be5124120 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2522 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-hv6qd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9be5124120 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2522 identity=33086 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-hv6qd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9be5124120 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2522 identity=33086 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-hv6qd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9be5124120 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2522 identity=33086 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-hv6qd subsys=endpoint level=info msg="Successful endpoint creation" containerID=9be5124120 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2522 identity=33086 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-hv6qd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.101 31a595ef-4230-4319-8b72-0ae0601a6141 default }" containerID=3551ec8e14947d1afab698db4bfebc5ad52c79bfb10e43d9a577523df0aa851b datapathConfiguration="&{false false false false false }" interface=lxc392cd3a5c68e k8sPodName=monitoring/kube-prometheus-stack-grafana-764696cf8d-fk54h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3551ec8e14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-764696cf8d-fk54h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3551ec8e14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-764696cf8d-fk54h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3551ec8e14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=1044 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-764696cf8d-fk54h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3551ec8e14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=1044 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-764696cf8d-fk54h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 f6f1fb1b-4406-4724-a4c9-5e56fffc479f default }" containerID=42e3d130c26cd3a468c0bb6a495d86ec5633ee84f1f1f84814fc966a4a88717b datapathConfiguration="&{false false false false false }" interface=lxc3a7e15f1221c k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvf6s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42e3d130c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvf6s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42e3d130c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvf6s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42e3d130c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identity=50235 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvf6s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42e3d130c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identity=50235 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvf6s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3551ec8e14 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=15 identity=1044 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-764696cf8d-fk54h subsys=endpoint level=info msg="Successful endpoint creation" containerID=3551ec8e14 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=15 identity=1044 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-764696cf8d-fk54h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=42e3d130c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1810 identity=50235 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvf6s subsys=endpoint level=info msg="Successful endpoint creation" containerID=42e3d130c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1810 identity=50235 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvf6s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 0f4cf9d1-26c9-49fe-8b6e-8124ade61088 default }" containerID=f211117d86854f95665ae96b05685809406d5346ee89a7295ee3bf0bd61cced5 datapathConfiguration="&{false false false false false }" interface=lxc4044d65060ac k8sPodName=monitoring/kube-prometheus-stack-admission-patch-d8rg9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f211117d86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-d8rg9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f211117d86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=e21ac021-db55-46fd-ab39-a34915c0f730,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e21ac021-db55-46fd-ab39-a34915c0f730,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-d8rg9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=e21ac021-db55-46fd-ab39-a34915c0f730;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=e21ac021-db55-46fd-ab39-a34915c0f730;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f211117d86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 identity=39746 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=e21ac021-db55-46fd-ab39-a34915c0f730,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e21ac021-db55-46fd-ab39-a34915c0f730,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-d8rg9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f211117d86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 identity=39746 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-d8rg9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f211117d86 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1434 identity=39746 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-d8rg9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f211117d86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1434 identity=39746 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-d8rg9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f211117d86 endpointID=1434 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-d8rg9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=e21ac021-db55-46fd-ab39-a34915c0f730 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=e21ac021-db55-46fd-ab39-a34915c0f730 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f211117d86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1434 identity=39746 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-d8rg9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 51431fbb-2c09-4876-87c7-eb15a45275cc default }" containerID=2dea41992f34db13031dcad79d16753a17a41daceea9f271fa03ddb50ff8cffe datapathConfiguration="&{false false false false false }" interface=lxceccfe983e8c3 k8sPodName=local-path-storage/helper-pod-create-pvc-334fcd40-c960-48b5-bcaf-d3b0a8047158 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2dea41992f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2952 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-334fcd40-c960-48b5-bcaf-d3b0a8047158 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2dea41992f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2952 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-334fcd40-c960-48b5-bcaf-d3b0a8047158 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2dea41992f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2952 identity=29252 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-334fcd40-c960-48b5-bcaf-d3b0a8047158 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2dea41992f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2952 identity=29252 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-334fcd40-c960-48b5-bcaf-d3b0a8047158 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2dea41992f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2952 identity=29252 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-334fcd40-c960-48b5-bcaf-d3b0a8047158 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2dea41992f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2952 identity=29252 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-334fcd40-c960-48b5-bcaf-d3b0a8047158 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.84 c69fdd4f-9c5f-4c84-8e55-6fe79d18c5e4 default }" containerID=fdabe37b8d4b1601cd924f048581389e39fe0433ec6063c74155865e39d05394 datapathConfiguration="&{false false false false false }" interface=lxcc9a8506e417b k8sPodName=local-path-storage/helper-pod-create-pvc-f5887175-3a22-40b7-bf63-3bdcf4af1e8e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdabe37b8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2125 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5887175-3a22-40b7-bf63-3bdcf4af1e8e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdabe37b8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2125 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5887175-3a22-40b7-bf63-3bdcf4af1e8e subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fdabe37b8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2125 identity=29252 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5887175-3a22-40b7-bf63-3bdcf4af1e8e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fdabe37b8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2125 identity=29252 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5887175-3a22-40b7-bf63-3bdcf4af1e8e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fdabe37b8d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2125 identity=29252 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5887175-3a22-40b7-bf63-3bdcf4af1e8e subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdabe37b8d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2125 identity=29252 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5887175-3a22-40b7-bf63-3bdcf4af1e8e subsys=daemon level=info msg="Delete endpoint request" containerID=2dea41992f endpointID=2952 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-334fcd40-c960-48b5-bcaf-d3b0a8047158 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2dea41992f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2952 identity=29252 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-334fcd40-c960-48b5-bcaf-d3b0a8047158 subsys=endpoint level=info msg="Delete endpoint request" containerID=fdabe37b8d endpointID=2125 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f5887175-3a22-40b7-bf63-3bdcf4af1e8e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fdabe37b8d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2125 identity=29252 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5887175-3a22-40b7-bf63-3bdcf4af1e8e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 c3967a37-43f4-4596-b8db-93c6251dafd6 default }" containerID=dc364205c2430cd8a1b3ebab39763895d39b2de295e50201c2c2ae8a00fb9299 datapathConfiguration="&{false false false false false }" interface=lxc74decdea029d k8sPodName=monitoring/loki-gateway-cf54cb88c-dj72p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc364205c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dj72p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc364205c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dj72p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc364205c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 identity=54145 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dj72p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc364205c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 identity=54145 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dj72p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc364205c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2251 identity=54145 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dj72p subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc364205c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2251 identity=54145 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dj72p subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.64 f00c1b15-a195-4060-8ee8-b51994910aeb default }" containerID=1b7a74af6f9cf44a2fc64486669a8ad0f402ba14b30827083026dcdbadbec042 datapathConfiguration="&{false false false false false }" interface=lxcbca789fc0312 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.58 be2c6741-6712-4a8d-b661-773ab2f1e164 default }" containerID=78bb8ea21a294ad66e7c44aa7926080650a8a3bb5e78dafdb4ce3dcb58ce64d3 datapathConfiguration="&{false false false false false }" interface=lxc30f92c483077 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b7a74af6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="New endpoint" containerID=78bb8ea21a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b7a74af6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78bb8ea21a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b7a74af6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 identity=62511 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b7a74af6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 identity=62511 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78bb8ea21a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identity=1133 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78bb8ea21a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identity=1133 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 0157bfa6-c262-4a7b-b000-9457ef129c31 default }" containerID=511f808e53c6373a24b01d9b53f115c7fbf4c3ce1d94a3ec2bdaf619dd6492c8 datapathConfiguration="&{false false false false false }" interface=lxc6fc4e217f86f k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=511f808e53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=511f808e53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=511f808e53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 identity=46251 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=511f808e53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1434 identity=46251 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b7a74af6f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2422 identity=62511 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b7a74af6f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2422 identity=62511 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=78bb8ea21a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1564 identity=1133 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=78bb8ea21a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1564 identity=1133 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=511f808e53 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1434 identity=46251 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=511f808e53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1434 identity=46251 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.132 1a5ffc79-3218-4acd-9971-0a4a7540d224 default }" containerID=f92bb0c198df3138baf4424d7a1477f2b5fcdaf2448fd65e4873516903bbc49f datapathConfiguration="&{false false false false false }" interface=lxc2b2b310e99fc k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f92bb0c198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f92bb0c198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f92bb0c198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identity=34576 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f92bb0c198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identity=34576 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f92bb0c198 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=459 identity=34576 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f92bb0c198 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=459 identity=34576 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.240 d5d0e4d9-396e-4270-b2b8-f05f1da52841 default }" containerID=2ecc8daa6a6b07a5fcf2b43808bfc7cc36c13835a0679104c9d2b5d3e0c39de6 datapathConfiguration="&{false false false false false }" interface=lxc06a4fece23c1 k8sPodName=local-path-storage/helper-pod-create-pvc-2b279097-34c7-4dce-8260-3f1e0ea11d89 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ecc8daa6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2646 ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b279097-34c7-4dce-8260-3f1e0ea11d89 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ecc8daa6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2646 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b279097-34c7-4dce-8260-3f1e0ea11d89 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ecc8daa6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2646 identity=29252 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b279097-34c7-4dce-8260-3f1e0ea11d89 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ecc8daa6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2646 identity=29252 ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b279097-34c7-4dce-8260-3f1e0ea11d89 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2ecc8daa6a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2646 identity=29252 ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b279097-34c7-4dce-8260-3f1e0ea11d89 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ecc8daa6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2646 identity=29252 ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b279097-34c7-4dce-8260-3f1e0ea11d89 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.209 605a0ed0-d2e9-4bd9-8c39-a32634f99a06 default }" containerID=5e424879c2656eea3b855f4eee83d410cf51c4c80acdd78b319bb8c90a31074a datapathConfiguration="&{false false false false false }" interface=lxc38f443399c6c k8sPodName=monitoring/vector-hn8xr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e424879c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=943 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/vector-hn8xr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e424879c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=943 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/vector-hn8xr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e424879c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=943 identity=22553 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/vector-hn8xr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e424879c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=943 identity=22553 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/vector-hn8xr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e424879c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=943 identity=22553 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/vector-hn8xr subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e424879c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=943 identity=22553 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/vector-hn8xr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2ecc8daa6a endpointID=2646 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2b279097-34c7-4dce-8260-3f1e0ea11d89 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2ecc8daa6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2646 identity=29252 ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2b279097-34c7-4dce-8260-3f1e0ea11d89 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 4f70826d-3c21-47d9-9708-333c469a3895 default }" containerID=daa567064d0a40b2d68dccac7c99b514e6b081c365105b3be37b742c4aac345b datapathConfiguration="&{false false false false false }" interface=lxc3c8bae3b09ad k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6lvx2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=daa567064d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6lvx2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=daa567064d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6lvx2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=daa567064d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identity=1470 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6lvx2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=daa567064d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identity=1470 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6lvx2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=daa567064d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1246 identity=1470 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6lvx2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=daa567064d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1246 identity=1470 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6lvx2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.133 7cf7199c-4916-4c7f-b51b-4b091a778c9e default }" containerID=53933ceb904d225f2d94c8b30c6dd9cf8c5901359ca8917b3c1b5c580c3e4cdd datapathConfiguration="&{false false false false false }" interface=lxc8e42e1bd4e54 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53933ceb90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53933ceb90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53933ceb90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identity=24027 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53933ceb90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identity=24027 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=53933ceb90 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=533 identity=24027 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=53933ceb90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=533 identity=24027 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.221 e5822eca-c070-4629-8a2b-0d5a92b31b65 default }" containerID=9c175e33d8adcf77f3f053c0a23b5cdb6a3fa8f2c91178caa2ef7be0ef44640e datapathConfiguration="&{false false false false false }" interface=lxcf3441a23dc50 k8sPodName=openstack/memcached-memcached-6479589586-c6p8v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c175e33d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c6p8v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c175e33d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c6p8v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9c175e33d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.221 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c6p8v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c175e33d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 identity=10533 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c6p8v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c175e33d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 identity=10533 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c6p8v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c175e33d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1118 identity=10533 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c6p8v subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c175e33d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1118 identity=10533 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c6p8v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.186 0e450dab-834c-46e7-abf3-051540feabe3 default }" containerID=f88d6b45ed7e736e2671f4e4d276efdc297accc3f2b3d84b504d642b4eed2396 datapathConfiguration="&{false false false false false }" interface=lxc842a1657c762 k8sPodName=local-path-storage/helper-pod-create-pvc-15db6397-fc91-4184-b4c0-4a34dc519446 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f88d6b45ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15db6397-fc91-4184-b4c0-4a34dc519446 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f88d6b45ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15db6397-fc91-4184-b4c0-4a34dc519446 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f88d6b45ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identity=29252 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15db6397-fc91-4184-b4c0-4a34dc519446 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f88d6b45ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identity=29252 ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15db6397-fc91-4184-b4c0-4a34dc519446 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f88d6b45ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=414 identity=29252 ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15db6397-fc91-4184-b4c0-4a34dc519446 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f88d6b45ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=414 identity=29252 ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15db6397-fc91-4184-b4c0-4a34dc519446 subsys=daemon level=info msg="Delete endpoint request" containerID=f88d6b45ed endpointID=414 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-15db6397-fc91-4184-b4c0-4a34dc519446 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f88d6b45ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=414 identity=29252 ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15db6397-fc91-4184-b4c0-4a34dc519446 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 fc845b54-09a1-422f-8b37-928e917a802c default }" containerID=f0357e3a9a77dac10bb604cbd2e94a20207cbc9bfafce6ebc1e2e82479d65479 datapathConfiguration="&{false false false false false }" interface=lxc6d366eb2a044 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0357e3a9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=406 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0357e3a9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=406 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f0357e3a9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=406 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0357e3a9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=406 identity=47781 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0357e3a9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=406 identity=47781 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f0357e3a9a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=406 identity=47781 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0357e3a9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=406 identity=47781 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.210 ec29dc66-306f-4c31-b906-9e53d7d59402 default }" containerID=de0f9d3b1345885403c49d74c4505c23cb64c6a23ff66fba6bf9fd3873bb2e45 datapathConfiguration="&{false false false false false }" interface=lxc9ec168877cd2 k8sPodName=openstack/keystone-api-6cbb784c-hlzl7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de0f9d3b13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1554 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-api-6cbb784c-hlzl7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de0f9d3b13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1554 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-api-6cbb784c-hlzl7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de0f9d3b13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1554 identity=57670 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-api-6cbb784c-hlzl7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de0f9d3b13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1554 identity=57670 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-api-6cbb784c-hlzl7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.59 93086adc-e7fe-47a2-9488-77d0364bf0a3 default }" containerID=cb02f4e5db179f21a7fc13c55b2e248c329af5ff48b53fea0252d7255bd0ff09 datapathConfiguration="&{false false false false false }" interface=lxcd3005200506d k8sPodName=openstack/keystone-credential-setup-pslbq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb02f4e5db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-credential-setup-pslbq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb02f4e5db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8fdf8ebe-e901-4760-a172-2758de78e22a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=8fdf8ebe-e901-4760-a172-2758de78e22a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-credential-setup-pslbq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8fdf8ebe-e901-4760-a172-2758de78e22a;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=8fdf8ebe-e901-4760-a172-2758de78e22a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb02f4e5db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 identity=41448 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8fdf8ebe-e901-4760-a172-2758de78e22a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=8fdf8ebe-e901-4760-a172-2758de78e22a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-credential-setup-pslbq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb02f4e5db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 identity=41448 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-credential-setup-pslbq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de0f9d3b13 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1554 identity=57670 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-api-6cbb784c-hlzl7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=de0f9d3b13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1554 identity=57670 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-api-6cbb784c-hlzl7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cb02f4e5db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2891 identity=41448 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-credential-setup-pslbq subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb02f4e5db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2891 identity=41448 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-credential-setup-pslbq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cb02f4e5db endpointID=2891 k8sNamespace=openstack k8sPodName=keystone-credential-setup-pslbq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8fdf8ebe-e901-4760-a172-2758de78e22a k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=8fdf8ebe-e901-4760-a172-2758de78e22a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=cb02f4e5db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2891 identity=41448 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-credential-setup-pslbq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 1410e99f-6863-4393-ba02-5cd9c6ad37cb default }" containerID=12f82a49e1478e21c05e2e19ff742c0c5bf53d30ab8c21debe19000415d25175 datapathConfiguration="&{false false false false false }" interface=lxc26341808008c k8sPodName=openstack/keystone-db-init-pwxjw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12f82a49e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-db-init-pwxjw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12f82a49e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=46dafc79-c641-4af3-8eaf-698d72648bdb,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=46dafc79-c641-4af3-8eaf-698d72648bdb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-db-init-pwxjw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=46dafc79-c641-4af3-8eaf-698d72648bdb;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=46dafc79-c641-4af3-8eaf-698d72648bdb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=12f82a49e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-db-init-pwxjw line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=12f82a49e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 identity=10861 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=46dafc79-c641-4af3-8eaf-698d72648bdb,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=46dafc79-c641-4af3-8eaf-698d72648bdb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-db-init-pwxjw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12f82a49e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 identity=10861 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-db-init-pwxjw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=12f82a49e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=550 identity=10861 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-db-init-pwxjw subsys=endpoint level=info msg="Successful endpoint creation" containerID=12f82a49e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=550 identity=10861 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-db-init-pwxjw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=12f82a49e1 endpointID=550 k8sNamespace=openstack k8sPodName=keystone-db-init-pwxjw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=46dafc79-c641-4af3-8eaf-698d72648bdb k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=46dafc79-c641-4af3-8eaf-698d72648bdb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=12f82a49e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=550 identity=10861 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-db-init-pwxjw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 350b357f-ae30-43f0-9133-ca199fb63206 default }" containerID=a079abc0425dd3f938bdd1ac48edeac3cdbb0afeadf4c7af242570576813fc91 datapathConfiguration="&{false false false false false }" interface=lxc1d2da84b1f8e k8sPodName=openstack/keystone-fernet-setup-mr598 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a079abc042 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1993 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-fernet-setup-mr598 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a079abc042 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1993 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1b6b6fa0-a073-4c5a-8149-2436e59acddc,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=1b6b6fa0-a073-4c5a-8149-2436e59acddc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-fernet-setup-mr598 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1b6b6fa0-a073-4c5a-8149-2436e59acddc;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=1b6b6fa0-a073-4c5a-8149-2436e59acddc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a079abc042 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1993 identity=37864 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1b6b6fa0-a073-4c5a-8149-2436e59acddc,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=1b6b6fa0-a073-4c5a-8149-2436e59acddc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-fernet-setup-mr598 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a079abc042 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1993 identity=37864 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-fernet-setup-mr598 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a079abc042 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1993 identity=37864 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-fernet-setup-mr598 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a079abc042 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1993 identity=37864 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-fernet-setup-mr598 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a079abc042 endpointID=1993 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-mr598 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1b6b6fa0-a073-4c5a-8149-2436e59acddc k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=1b6b6fa0-a073-4c5a-8149-2436e59acddc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a079abc042 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1993 identity=37864 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-fernet-setup-mr598 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 a183ed43-95ec-4719-aa0b-86744c414536 default }" containerID=9c3dff536b50cefed7de04e41b3b68c634e0c51e20c2a0de9cafcda00b4b6afb datapathConfiguration="&{false false false false false }" interface=lxc71786bbfe990 k8sPodName=openstack/keystone-db-sync-w7ntm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c3dff536b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-db-sync-w7ntm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c3dff536b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=96bae0a2-42fa-4b0e-8d1d-dd522fd0598b,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=96bae0a2-42fa-4b0e-8d1d-dd522fd0598b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-db-sync-w7ntm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=96bae0a2-42fa-4b0e-8d1d-dd522fd0598b;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=96bae0a2-42fa-4b0e-8d1d-dd522fd0598b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c3dff536b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=54083 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=96bae0a2-42fa-4b0e-8d1d-dd522fd0598b,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=96bae0a2-42fa-4b0e-8d1d-dd522fd0598b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-db-sync-w7ntm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9c3dff536b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=54083 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-db-sync-w7ntm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c3dff536b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=555 identity=54083 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-db-sync-w7ntm subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c3dff536b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=555 identity=54083 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-db-sync-w7ntm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9c3dff536b endpointID=555 k8sNamespace=openstack k8sPodName=keystone-db-sync-w7ntm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=96bae0a2-42fa-4b0e-8d1d-dd522fd0598b k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=96bae0a2-42fa-4b0e-8d1d-dd522fd0598b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9c3dff536b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=555 identity=54083 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/keystone-db-sync-w7ntm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 74201de3-71d8-4c7a-96f1-b399b9f20d65 default }" containerID=79021b28e5cc04bdd54f7eaf18568330458da120cf35527bac55d81c6396665c datapathConfiguration="&{false false false false false }" interface=lxc555e1a66f031 k8sPodName=openstack/keystone-rabbit-init-x62mx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79021b28e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1962 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-rabbit-init-x62mx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79021b28e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1962 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f50939be-2462-4830-b5e6-e67c40c38563,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f50939be-2462-4830-b5e6-e67c40c38563,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-rabbit-init-x62mx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f50939be-2462-4830-b5e6-e67c40c38563;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f50939be-2462-4830-b5e6-e67c40c38563;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79021b28e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1962 identity=26037 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f50939be-2462-4830-b5e6-e67c40c38563,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f50939be-2462-4830-b5e6-e67c40c38563,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-rabbit-init-x62mx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79021b28e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1962 identity=26037 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-rabbit-init-x62mx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79021b28e5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1962 identity=26037 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-rabbit-init-x62mx subsys=endpoint level=info msg="Successful endpoint creation" containerID=79021b28e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1962 identity=26037 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-rabbit-init-x62mx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=79021b28e5 endpointID=1962 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-x62mx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f50939be-2462-4830-b5e6-e67c40c38563 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f50939be-2462-4830-b5e6-e67c40c38563 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=79021b28e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1962 identity=26037 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-rabbit-init-x62mx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 1dc387df-042f-4b48-9c78-4581fd1d941a default }" containerID=fe0439c83308f7d6c5e7761cf213924613c2b1671f6b2ae325b9a706afaa2d39 datapathConfiguration="&{false false false false false }" interface=lxcc901da89d907 k8sPodName=openstack/keystone-domain-manage-25kc4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe0439c833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-domain-manage-25kc4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe0439c833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=69b6f20d-c5e4-47c3-a8be-5d49f1dd6eb3,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=69b6f20d-c5e4-47c3-a8be-5d49f1dd6eb3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-domain-manage-25kc4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=69b6f20d-c5e4-47c3-a8be-5d49f1dd6eb3;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=69b6f20d-c5e4-47c3-a8be-5d49f1dd6eb3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe0439c833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identity=545 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=69b6f20d-c5e4-47c3-a8be-5d49f1dd6eb3,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=69b6f20d-c5e4-47c3-a8be-5d49f1dd6eb3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-domain-manage-25kc4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fe0439c833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identity=545 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-domain-manage-25kc4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe0439c833 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3158 identity=545 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-domain-manage-25kc4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe0439c833 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3158 identity=545 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-domain-manage-25kc4 subsys=daemon level=info msg="Delete endpoint request" containerID=fe0439c833 endpointID=3158 k8sNamespace=openstack k8sPodName=keystone-domain-manage-25kc4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=69b6f20d-c5e4-47c3-a8be-5d49f1dd6eb3 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=69b6f20d-c5e4-47c3-a8be-5d49f1dd6eb3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fe0439c833 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3158 identity=545 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-domain-manage-25kc4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 7e5355c5-ee6f-45a4-871c-e88eb726bede default }" containerID=97c719e9b307167671709bf0296933fcd874f06221e5e2121dcbbbfe65c46095 datapathConfiguration="&{false false false false false }" interface=lxc266e61ac6a83 k8sPodName=openstack/keystone-bootstrap-8sgc6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97c719e9b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-bootstrap-8sgc6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97c719e9b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e1c81004-9831-4226-bdd7-11cff8d06338,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e1c81004-9831-4226-bdd7-11cff8d06338,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-bootstrap-8sgc6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e1c81004-9831-4226-bdd7-11cff8d06338;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=e1c81004-9831-4226-bdd7-11cff8d06338;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97c719e9b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identity=345 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e1c81004-9831-4226-bdd7-11cff8d06338,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e1c81004-9831-4226-bdd7-11cff8d06338,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-bootstrap-8sgc6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97c719e9b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identity=345 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-bootstrap-8sgc6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=97c719e9b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1197 identity=345 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-bootstrap-8sgc6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=97c719e9b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1197 identity=345 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-bootstrap-8sgc6 subsys=daemon level=info msg="Delete endpoint request" containerID=97c719e9b3 endpointID=1197 k8sNamespace=openstack k8sPodName=keystone-bootstrap-8sgc6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e1c81004-9831-4226-bdd7-11cff8d06338 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=e1c81004-9831-4226-bdd7-11cff8d06338 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=97c719e9b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1197 identity=345 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-bootstrap-8sgc6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 3da4068a-5400-473c-a3a2-32cfa8efd179 default }" containerID=8658983bf82a1768ce46b7d6700983d44dd2ab0e4e61899bd2d4067245f7c44e datapathConfiguration="&{false false false false false }" interface=lxc684319218342 k8sPodName=local-path-storage/helper-pod-create-pvc-55a9b545-0531-470a-910a-84af34195b04 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8658983bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-55a9b545-0531-470a-910a-84af34195b04 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8658983bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-55a9b545-0531-470a-910a-84af34195b04 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8658983bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=29252 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-55a9b545-0531-470a-910a-84af34195b04 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8658983bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=29252 ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-55a9b545-0531-470a-910a-84af34195b04 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8658983bf8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=405 identity=29252 ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-55a9b545-0531-470a-910a-84af34195b04 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8658983bf8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=405 identity=29252 ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-55a9b545-0531-470a-910a-84af34195b04 subsys=daemon level=info msg="Delete endpoint request" containerID=8658983bf8 endpointID=405 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-55a9b545-0531-470a-910a-84af34195b04 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8658983bf8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=405 identity=29252 ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-55a9b545-0531-470a-910a-84af34195b04 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 b7a798ee-1680-4392-a659-55392f9fbec8 default }" containerID=d73205051bb8e863f8dccd029f0081e1b8a07f6a3b99f37c727cf2cade2fa8c5 datapathConfiguration="&{false false false false false }" interface=lxc1445fc8912e4 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d73205051b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1313 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d73205051b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1313 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d73205051b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1313 identity=19077 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d73205051b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1313 identity=19077 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d73205051b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1313 identity=19077 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d73205051b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1313 identity=19077 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.252 cf99ffb2-1ec0-4672-833f-a647032d630d default }" containerID=60062d11374ad9b67d506385e016671859b9e2fd6425e8e4d3456b59afea4f7e datapathConfiguration="&{false false false false false }" interface=lxc03e7a8dd69fa k8sPodName=openstack/barbican-api-66cc74cfb7-xsdjs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60062d1137 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2549 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/barbican-api-66cc74cfb7-xsdjs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60062d1137 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2549 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/barbican-api-66cc74cfb7-xsdjs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=60062d1137 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2549 identity=12840 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/barbican-api-66cc74cfb7-xsdjs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60062d1137 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2549 identity=12840 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/barbican-api-66cc74cfb7-xsdjs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 5c7591f8-79ff-4741-b2d6-ebddaecea20c default }" containerID=919975fc7e76d6c0588f0b3de0f948147d2c14744b72b13b09875c7dacc950cd datapathConfiguration="&{false false false false false }" interface=lxc822663d67c69 k8sPodName=openstack/barbican-db-init-gdpdp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=919975fc7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2303 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-gdpdp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=919975fc7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2303 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7f7d245d-328e-4677-90b0-316b2e117a91,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=7f7d245d-328e-4677-90b0-316b2e117a91,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-gdpdp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=7f7d245d-328e-4677-90b0-316b2e117a91;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=7f7d245d-328e-4677-90b0-316b2e117a91;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=919975fc7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2303 identity=20000 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7f7d245d-328e-4677-90b0-316b2e117a91,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=7f7d245d-328e-4677-90b0-316b2e117a91,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-gdpdp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=919975fc7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2303 identity=20000 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-gdpdp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60062d1137 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2549 identity=12840 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/barbican-api-66cc74cfb7-xsdjs subsys=endpoint level=info msg="Successful endpoint creation" containerID=60062d1137 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2549 identity=12840 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/barbican-api-66cc74cfb7-xsdjs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=919975fc7e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2303 identity=20000 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-gdpdp subsys=endpoint level=info msg="Successful endpoint creation" containerID=919975fc7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2303 identity=20000 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-gdpdp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=919975fc7e endpointID=2303 k8sNamespace=openstack k8sPodName=barbican-db-init-gdpdp subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=7f7d245d-328e-4677-90b0-316b2e117a91 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=7f7d245d-328e-4677-90b0-316b2e117a91 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=919975fc7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2303 identity=20000 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-gdpdp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 3872493b-364b-409d-8489-61be10230854 default }" containerID=8aea38040304e8ace19b98b9d27e4aa2405fdddc39aa11117b7b813b7f1975a7 datapathConfiguration="&{false false false false false }" interface=lxc6f9687e2ea05 k8sPodName=openstack/barbican-db-sync-w8shl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8aea380403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-db-sync-w8shl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8aea380403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a63cbc64-f3c6-41e6-a324-9b118f7c4890,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a63cbc64-f3c6-41e6-a324-9b118f7c4890,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-db-sync-w8shl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8aea380403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-db-sync-w8shl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a63cbc64-f3c6-41e6-a324-9b118f7c4890;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=a63cbc64-f3c6-41e6-a324-9b118f7c4890;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8aea380403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 identity=9870 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a63cbc64-f3c6-41e6-a324-9b118f7c4890,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a63cbc64-f3c6-41e6-a324-9b118f7c4890,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-db-sync-w8shl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8aea380403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 identity=9870 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-db-sync-w8shl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8aea380403 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3232 identity=9870 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-db-sync-w8shl subsys=endpoint level=info msg="Successful endpoint creation" containerID=8aea380403 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3232 identity=9870 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-db-sync-w8shl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8aea380403 endpointID=3232 k8sNamespace=openstack k8sPodName=barbican-db-sync-w8shl subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a63cbc64-f3c6-41e6-a324-9b118f7c4890 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=a63cbc64-f3c6-41e6-a324-9b118f7c4890 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8aea380403 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3232 identity=9870 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-db-sync-w8shl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 d48cd4ec-531c-44f4-a311-7335999b9988 default }" containerID=f84fcdec8e5f779a57e8337e0716729184026fb23ff86d771c6dc3174ec57367 datapathConfiguration="&{false false false false false }" interface=lxca1f436ca9d70 k8sPodName=openstack/barbican-rabbit-init-hxkvn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f84fcdec8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-rabbit-init-hxkvn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f84fcdec8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6b375378-b95e-4b75-9b79-2f8bb856f9c3,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6b375378-b95e-4b75-9b79-2f8bb856f9c3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-rabbit-init-hxkvn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=6b375378-b95e-4b75-9b79-2f8bb856f9c3;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=6b375378-b95e-4b75-9b79-2f8bb856f9c3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f84fcdec8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identity=14971 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6b375378-b95e-4b75-9b79-2f8bb856f9c3,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6b375378-b95e-4b75-9b79-2f8bb856f9c3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-rabbit-init-hxkvn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f84fcdec8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identity=14971 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-rabbit-init-hxkvn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f84fcdec8e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=993 identity=14971 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-rabbit-init-hxkvn subsys=endpoint level=info msg="Successful endpoint creation" containerID=f84fcdec8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=993 identity=14971 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-rabbit-init-hxkvn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f84fcdec8e endpointID=993 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-hxkvn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=6b375378-b95e-4b75-9b79-2f8bb856f9c3 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=6b375378-b95e-4b75-9b79-2f8bb856f9c3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f84fcdec8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=993 identity=14971 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-rabbit-init-hxkvn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 2a789146-b424-4e7e-81dc-aa85710515ce default }" containerID=74da8fd04e3029ba6953e3919dd587e82c05412b116472ee0ca7e0ef9ee684d5 datapathConfiguration="&{false false false false false }" interface=lxc539c270e49d4 k8sPodName=openstack/barbican-ks-service-ncpx7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74da8fd04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1149 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-ncpx7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74da8fd04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1149 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5261ba6f-4bf3-4ab3-8daa-ec6600b72558,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=5261ba6f-4bf3-4ab3-8daa-ec6600b72558,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-ncpx7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=74da8fd04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1149 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-ncpx7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5261ba6f-4bf3-4ab3-8daa-ec6600b72558;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=5261ba6f-4bf3-4ab3-8daa-ec6600b72558;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74da8fd04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1149 identity=36395 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5261ba6f-4bf3-4ab3-8daa-ec6600b72558,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=5261ba6f-4bf3-4ab3-8daa-ec6600b72558,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-ncpx7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74da8fd04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1149 identity=36395 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-ncpx7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74da8fd04e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1149 identity=36395 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-ncpx7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=74da8fd04e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1149 identity=36395 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-ncpx7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03637033830670797 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=74da8fd04e endpointID=1149 k8sNamespace=openstack k8sPodName=barbican-ks-service-ncpx7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5261ba6f-4bf3-4ab3-8daa-ec6600b72558 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=5261ba6f-4bf3-4ab3-8daa-ec6600b72558 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=74da8fd04e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1149 identity=36395 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-ncpx7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 06cb4d64-26ed-4271-bfaa-eac2d204f881 default }" containerID=91c0d89ab5d90fe2665d1a0186cf35936690ac730e66bfc7ddb79e8694df1a31 datapathConfiguration="&{false false false false false }" interface=lxc198dfcadcefa k8sPodName=openstack/barbican-ks-endpoints-zg5tw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91c0d89ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zg5tw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91c0d89ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3943be75-0dc8-4ccb-a206-0e4a0a71e163,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3943be75-0dc8-4ccb-a206-0e4a0a71e163,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zg5tw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3943be75-0dc8-4ccb-a206-0e4a0a71e163;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3943be75-0dc8-4ccb-a206-0e4a0a71e163;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91c0d89ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 identity=5414 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3943be75-0dc8-4ccb-a206-0e4a0a71e163,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3943be75-0dc8-4ccb-a206-0e4a0a71e163,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zg5tw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91c0d89ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 identity=5414 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zg5tw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=91c0d89ab5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1414 identity=5414 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zg5tw subsys=endpoint level=info msg="Successful endpoint creation" containerID=91c0d89ab5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1414 identity=5414 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zg5tw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=91c0d89ab5 endpointID=1414 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-zg5tw subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3943be75-0dc8-4ccb-a206-0e4a0a71e163 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3943be75-0dc8-4ccb-a206-0e4a0a71e163 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=91c0d89ab5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1414 identity=5414 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-ks-endpoints-zg5tw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 3f4cfad8-b4b7-4fce-b7a4-3e593cdf7f7e default }" containerID=1f6f69541b8f300139cb48e0cbc851409f49bc212f78929900bef1dd4f23ea19 datapathConfiguration="&{false false false false false }" interface=lxce6f9b10c9004 k8sPodName=openstack/barbican-ks-user-h26bd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f6f69541b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-ks-user-h26bd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f6f69541b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=77f2ac2a-6c2b-4e84-bc75-89542fe1b912,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=77f2ac2a-6c2b-4e84-bc75-89542fe1b912,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-ks-user-h26bd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1f6f69541b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-ks-user-h26bd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=77f2ac2a-6c2b-4e84-bc75-89542fe1b912;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=77f2ac2a-6c2b-4e84-bc75-89542fe1b912;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f6f69541b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identity=10545 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=77f2ac2a-6c2b-4e84-bc75-89542fe1b912,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=77f2ac2a-6c2b-4e84-bc75-89542fe1b912,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-ks-user-h26bd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f6f69541b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identity=10545 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-ks-user-h26bd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f6f69541b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1744 identity=10545 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-ks-user-h26bd subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f6f69541b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1744 identity=10545 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-ks-user-h26bd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1f6f69541b endpointID=1744 k8sNamespace=openstack k8sPodName=barbican-ks-user-h26bd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=77f2ac2a-6c2b-4e84-bc75-89542fe1b912 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=77f2ac2a-6c2b-4e84-bc75-89542fe1b912 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1f6f69541b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1744 identity=10545 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-ks-user-h26bd subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.179 7e07989c-db45-4d6d-bd93-f75769fe3117 default }" containerID=f67ed9fb2ab707485373dae4b78dacbe63e8199b264b4c521824a437225f14ed datapathConfiguration="&{false false false false false }" interface=lxcc197b813ed88 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-b7j57 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f67ed9fb2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 ipv4=10.0.0.179 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-b7j57 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f67ed9fb2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.179 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-b7j57 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f67ed9fb2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.179 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-b7j57 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f67ed9fb2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identity=33528 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.179 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-b7j57 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f67ed9fb2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identity=33528 ipv4=10.0.0.179 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-b7j57 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f67ed9fb2a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=207 identity=33528 ipv4=10.0.0.179 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-b7j57 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f67ed9fb2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=207 identity=33528 ipv4=10.0.0.179 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-b7j57 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.62 22f82d12-f24d-4e4b-a450-b88145774fec default }" containerID=8336f0e75332b852fa44ecc69322b6b526b6ae82267dd1b238c9789d749627d8 datapathConfiguration="&{false false false false false }" interface=lxc1434b6b6b1c6 k8sPodName=openstack/rook-ceph-detect-version-kcxcp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8336f0e753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kcxcp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8336f0e753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=56788c01-97e2-486f-ba4d-ef0ecd2c22e2,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=56788c01-97e2-486f-ba4d-ef0ecd2c22e2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kcxcp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=56788c01-97e2-486f-ba4d-ef0ecd2c22e2;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=56788c01-97e2-486f-ba4d-ef0ecd2c22e2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8336f0e753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identity=13303 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=56788c01-97e2-486f-ba4d-ef0ecd2c22e2,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=56788c01-97e2-486f-ba4d-ef0ecd2c22e2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kcxcp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8336f0e753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identity=13303 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kcxcp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8336f0e753 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=689 identity=13303 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kcxcp subsys=endpoint level=info msg="Successful endpoint creation" containerID=8336f0e753 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=689 identity=13303 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kcxcp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8336f0e753 endpointID=689 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-kcxcp subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=56788c01-97e2-486f-ba4d-ef0ecd2c22e2 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=56788c01-97e2-486f-ba4d-ef0ecd2c22e2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=8336f0e753 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=689 identity=13303 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kcxcp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 fd0f3d53-eb83-492b-8e12-c6f89bdba1de default }" containerID=46a1d9bbea39d51c601e776805d86b98ef299e38fc327e2b17f149e60db1b183 datapathConfiguration="&{false false false false false }" interface=lxc9c6ec8d6d77d k8sPodName=openstack/ceph-object-controller-detect-version-586tp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46a1d9bbea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-586tp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46a1d9bbea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=65bac0bb-17ae-40e0-9121-487d507107bf,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=65bac0bb-17ae-40e0-9121-487d507107bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-586tp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=65bac0bb-17ae-40e0-9121-487d507107bf;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=65bac0bb-17ae-40e0-9121-487d507107bf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46a1d9bbea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=40255 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=65bac0bb-17ae-40e0-9121-487d507107bf,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=65bac0bb-17ae-40e0-9121-487d507107bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-586tp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46a1d9bbea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=40255 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-586tp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46a1d9bbea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=22 identity=40255 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-586tp subsys=endpoint level=info msg="Successful endpoint creation" containerID=46a1d9bbea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=22 identity=40255 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-586tp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 e31d74b5-9fa3-4847-adaa-d8b5a60dcc96 default }" containerID=c71eeebbccd07e86480111c2350ff78bcfbfbc8418e6584b82b7cc3988543990 datapathConfiguration="&{false false false false false }" interface=lxc7a895b7c5eea k8sPodName=local-path-storage/helper-pod-create-pvc-4a3fef32-71de-4578-ab1b-9dd70f926338 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c71eeebbcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a3fef32-71de-4578-ab1b-9dd70f926338 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c71eeebbcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a3fef32-71de-4578-ab1b-9dd70f926338 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c71eeebbcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 identity=29252 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a3fef32-71de-4578-ab1b-9dd70f926338 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c71eeebbcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 identity=29252 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a3fef32-71de-4578-ab1b-9dd70f926338 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c71eeebbcc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1352 identity=29252 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a3fef32-71de-4578-ab1b-9dd70f926338 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c71eeebbcc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1352 identity=29252 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a3fef32-71de-4578-ab1b-9dd70f926338 subsys=daemon level=info msg="Delete endpoint request" containerID=46a1d9bbea endpointID=22 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-586tp subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=65bac0bb-17ae-40e0-9121-487d507107bf k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=65bac0bb-17ae-40e0-9121-487d507107bf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=46a1d9bbea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=22 identity=40255 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-586tp subsys=endpoint level=info msg="Delete endpoint request" containerID=c71eeebbcc endpointID=1352 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4a3fef32-71de-4578-ab1b-9dd70f926338 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c71eeebbcc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1352 identity=29252 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a3fef32-71de-4578-ab1b-9dd70f926338 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 96a49e4f-0b65-4512-9ad5-71e979aae8a6 default }" containerID=dd39427b365d3764cfaa982743858be105b5e62eaf9a2772f3e870be2c9ef0ed datapathConfiguration="&{false false false false false }" interface=lxc8254b244aab4 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd39427b36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2059 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd39427b36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2059 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd39427b36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2059 identity=4566 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd39427b36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2059 identity=4566 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dd39427b36 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2059 identity=4566 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd39427b36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2059 identity=4566 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.97 3c9950a0-0643-48a0-8375-d8fb7bee6e65 default }" containerID=df480f5aa6782cbe1c1f0dc923b0f7ae28352bb863401dca26978c104c57767f datapathConfiguration="&{false false false false false }" interface=lxcfc89511bca7e k8sPodName=openstack/glance-db-init-2lqdb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df480f5aa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-db-init-2lqdb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df480f5aa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a9e83a17-e8dc-4faf-aefe-434b50325dc8,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=a9e83a17-e8dc-4faf-aefe-434b50325dc8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-db-init-2lqdb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a9e83a17-e8dc-4faf-aefe-434b50325dc8;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=a9e83a17-e8dc-4faf-aefe-434b50325dc8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=df480f5aa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identity=52873 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a9e83a17-e8dc-4faf-aefe-434b50325dc8,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=a9e83a17-e8dc-4faf-aefe-434b50325dc8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-db-init-2lqdb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df480f5aa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identity=52873 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-db-init-2lqdb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df480f5aa6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=490 identity=52873 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-db-init-2lqdb subsys=endpoint level=info msg="Successful endpoint creation" containerID=df480f5aa6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=490 identity=52873 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-db-init-2lqdb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df480f5aa6 endpointID=490 k8sNamespace=openstack k8sPodName=glance-db-init-2lqdb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a9e83a17-e8dc-4faf-aefe-434b50325dc8 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=a9e83a17-e8dc-4faf-aefe-434b50325dc8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=df480f5aa6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=490 identity=52873 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-db-init-2lqdb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 2216ed77-c4b9-41e7-b769-5ac5266b3009 default }" containerID=133d976bce1e30cce5b267b393a895e8426619cb364ba377fd62c731b4a772d8 datapathConfiguration="&{false false false false false }" interface=lxc4ff7d08e2d70 k8sPodName=openstack/glance-db-sync-fwgsn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=133d976bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-db-sync-fwgsn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=133d976bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=82354e96-4bb7-44c7-bb79-371458774447,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=82354e96-4bb7-44c7-bb79-371458774447,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-db-sync-fwgsn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=82354e96-4bb7-44c7-bb79-371458774447;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=82354e96-4bb7-44c7-bb79-371458774447;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=133d976bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=676 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=82354e96-4bb7-44c7-bb79-371458774447,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=82354e96-4bb7-44c7-bb79-371458774447,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-db-sync-fwgsn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=133d976bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=676 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-db-sync-fwgsn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=133d976bce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=31 identity=676 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-db-sync-fwgsn subsys=endpoint level=info msg="Successful endpoint creation" containerID=133d976bce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=31 identity=676 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-db-sync-fwgsn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.65 8228ece0-89fe-4e20-8222-752100fc23b4 default }" containerID=f34bebcb0de93492d990094bc7566a6e9f9cab03cd44a0031f661efd9e2c2cc6 datapathConfiguration="&{false false false false false }" interface=lxc9b618678d407 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5xjtl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f34bebcb0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1483 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5xjtl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f34bebcb0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1483 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5xjtl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f34bebcb0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1483 identity=51764 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5xjtl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f34bebcb0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1483 identity=51764 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5xjtl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 dbddcd20-2693-4624-9390-ab76043f170d default }" containerID=23bbf77e870a2b1da42ffc6f65ea1c18e37caf342e5cac450e656a91b90d2d83 datapathConfiguration="&{false false false false false }" interface=lxc3f811357bf1c k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zlkkv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23bbf77e87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zlkkv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23bbf77e87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zlkkv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23bbf77e87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 identity=42425 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zlkkv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23bbf77e87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 identity=42425 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zlkkv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f34bebcb0d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1483 identity=51764 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5xjtl subsys=endpoint level=info msg="Successful endpoint creation" containerID=f34bebcb0d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1483 identity=51764 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5xjtl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=23bbf77e87 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=939 identity=42425 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zlkkv subsys=endpoint level=info msg="Successful endpoint creation" containerID=23bbf77e87 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=939 identity=42425 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zlkkv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=133d976bce endpointID=31 k8sNamespace=openstack k8sPodName=glance-db-sync-fwgsn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=82354e96-4bb7-44c7-bb79-371458774447 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=82354e96-4bb7-44c7-bb79-371458774447 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=133d976bce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=31 identity=676 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/glance-db-sync-fwgsn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 36c10516-eb9b-4252-986a-770844f02c70 default }" containerID=de9ad9a511f488291b7dbe62573cb8bb575fe068feeb47f2d9b859c813328db6 datapathConfiguration="&{false false false false false }" interface=lxcc1e03dd6293c k8sPodName=openstack/glance-rabbit-init-4kdmm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de9ad9a511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-rabbit-init-4kdmm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de9ad9a511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7015bc4b-a0a4-482a-a333-1a1026b2214d,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7015bc4b-a0a4-482a-a333-1a1026b2214d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-rabbit-init-4kdmm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=de9ad9a511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-rabbit-init-4kdmm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7015bc4b-a0a4-482a-a333-1a1026b2214d;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=7015bc4b-a0a4-482a-a333-1a1026b2214d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de9ad9a511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 identity=33187 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7015bc4b-a0a4-482a-a333-1a1026b2214d,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7015bc4b-a0a4-482a-a333-1a1026b2214d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-rabbit-init-4kdmm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de9ad9a511 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 identity=33187 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-rabbit-init-4kdmm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de9ad9a511 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1531 identity=33187 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-rabbit-init-4kdmm subsys=endpoint level=info msg="Successful endpoint creation" containerID=de9ad9a511 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1531 identity=33187 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-rabbit-init-4kdmm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=de9ad9a511 endpointID=1531 k8sNamespace=openstack k8sPodName=glance-rabbit-init-4kdmm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7015bc4b-a0a4-482a-a333-1a1026b2214d k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=7015bc4b-a0a4-482a-a333-1a1026b2214d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=de9ad9a511 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1531 identity=33187 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-rabbit-init-4kdmm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 e78c98be-8afb-4d1c-9f48-236e39e91028 default }" containerID=961a35c189906a3504baf50951c1f5cd016aa773be5bc0caa29326359a407c56 datapathConfiguration="&{false false false false false }" interface=lxc6055ac11828b k8sPodName=openstack/glance-ks-service-v626z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=961a35c189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3166 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-service-v626z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=961a35c189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3166 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=37976f0a-292e-4c2d-86ff-19489b95c4cc,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=37976f0a-292e-4c2d-86ff-19489b95c4cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-service-v626z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=37976f0a-292e-4c2d-86ff-19489b95c4cc;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=37976f0a-292e-4c2d-86ff-19489b95c4cc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=961a35c189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3166 identity=9494 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=37976f0a-292e-4c2d-86ff-19489b95c4cc,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=37976f0a-292e-4c2d-86ff-19489b95c4cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-service-v626z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=961a35c189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3166 identity=9494 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-service-v626z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=961a35c189 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3166 identity=9494 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-service-v626z subsys=endpoint level=info msg="Successful endpoint creation" containerID=961a35c189 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3166 identity=9494 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-service-v626z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=961a35c189 endpointID=3166 k8sNamespace=openstack k8sPodName=glance-ks-service-v626z subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=37976f0a-292e-4c2d-86ff-19489b95c4cc k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=37976f0a-292e-4c2d-86ff-19489b95c4cc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=961a35c189 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3166 identity=9494 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-service-v626z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 243c3871-341d-4497-966d-4c9543afb1b0 default }" containerID=5e045263ce2579750863e42d2c60abeb915707d3bd23206d730ca13a8c63ecf1 datapathConfiguration="&{false false false false false }" interface=lxcdaf54d98e886 k8sPodName=openstack/glance-ks-endpoints-pz5lk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e045263ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1314 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-pz5lk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e045263ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1314 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=36b001a5-fe3d-443a-94c9-99a38ce8502f,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=36b001a5-fe3d-443a-94c9-99a38ce8502f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-pz5lk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=36b001a5-fe3d-443a-94c9-99a38ce8502f;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=36b001a5-fe3d-443a-94c9-99a38ce8502f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e045263ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1314 identity=24565 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=36b001a5-fe3d-443a-94c9-99a38ce8502f,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=36b001a5-fe3d-443a-94c9-99a38ce8502f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-pz5lk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e045263ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1314 identity=24565 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-pz5lk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e045263ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1314 identity=24565 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-pz5lk subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e045263ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1314 identity=24565 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-pz5lk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5e045263ce endpointID=1314 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-pz5lk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=36b001a5-fe3d-443a-94c9-99a38ce8502f k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=36b001a5-fe3d-443a-94c9-99a38ce8502f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5e045263ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1314 identity=24565 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-pz5lk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 7cf08e55-90be-4ea0-8628-9ccf76c7037a default }" containerID=abbcb4d719da29578fbf5f2a0bb561b10a3ea6d9b97d797809f10ba9b8073d7c datapathConfiguration="&{false false false false false }" interface=lxcf54ca746380a k8sPodName=openstack/glance-ks-user-vkndw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abbcb4d719 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=568 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-ks-user-vkndw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abbcb4d719 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=568 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9fb74697-3ea8-4310-a891-5c105beb9d32,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=9fb74697-3ea8-4310-a891-5c105beb9d32,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-ks-user-vkndw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=abbcb4d719 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=568 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-ks-user-vkndw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9fb74697-3ea8-4310-a891-5c105beb9d32;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=9fb74697-3ea8-4310-a891-5c105beb9d32;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abbcb4d719 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=568 identity=30838 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9fb74697-3ea8-4310-a891-5c105beb9d32,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=9fb74697-3ea8-4310-a891-5c105beb9d32,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-ks-user-vkndw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=abbcb4d719 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=568 identity=30838 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-ks-user-vkndw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=abbcb4d719 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=568 identity=30838 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-ks-user-vkndw subsys=endpoint level=info msg="Successful endpoint creation" containerID=abbcb4d719 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=568 identity=30838 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-ks-user-vkndw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=abbcb4d719 endpointID=568 k8sNamespace=openstack k8sPodName=glance-ks-user-vkndw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9fb74697-3ea8-4310-a891-5c105beb9d32 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=9fb74697-3ea8-4310-a891-5c105beb9d32 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=abbcb4d719 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=568 identity=30838 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-ks-user-vkndw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 5af182ad-012f-4de9-b84d-b8577de824bc default }" containerID=a719bf4959ed8c310fcdd7feec9c7833a0705c9d1730ffc7b6ce79f274f54516 datapathConfiguration="&{false false false false false }" interface=lxc23207b4758cd k8sPodName=openstack/glance-metadefs-load-swcs5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a719bf4959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-metadefs-load-swcs5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a719bf4959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5afd3f55-0d2e-494a-9b7b-c6dc9b0bd28c,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=5afd3f55-0d2e-494a-9b7b-c6dc9b0bd28c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-metadefs-load-swcs5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5afd3f55-0d2e-494a-9b7b-c6dc9b0bd28c;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=5afd3f55-0d2e-494a-9b7b-c6dc9b0bd28c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a719bf4959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identity=63940 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5afd3f55-0d2e-494a-9b7b-c6dc9b0bd28c,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=5afd3f55-0d2e-494a-9b7b-c6dc9b0bd28c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-metadefs-load-swcs5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a719bf4959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identity=63940 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-metadefs-load-swcs5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a719bf4959 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1207 identity=63940 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-metadefs-load-swcs5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a719bf4959 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1207 identity=63940 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-metadefs-load-swcs5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a719bf4959 endpointID=1207 k8sNamespace=openstack k8sPodName=glance-metadefs-load-swcs5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5afd3f55-0d2e-494a-9b7b-c6dc9b0bd28c k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=5afd3f55-0d2e-494a-9b7b-c6dc9b0bd28c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a719bf4959 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1207 identity=63940 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-metadefs-load-swcs5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 f45dbdf9-b128-42ed-abf8-6326e22355c4 default }" containerID=76fa1b3d9dd42ea4b0748269b98ad4e7fd5b194f0e22b63f828f3920c0b62aca datapathConfiguration="&{false false false false false }" interface=lxc0d065d64790b k8sPodName=openstack/glance-storage-init-97lrg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76fa1b3d9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2131 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-storage-init-97lrg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76fa1b3d9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2131 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4baef949-e65a-483a-81cd-4661fab81442,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=4baef949-e65a-483a-81cd-4661fab81442,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-storage-init-97lrg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4baef949-e65a-483a-81cd-4661fab81442;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=4baef949-e65a-483a-81cd-4661fab81442;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=76fa1b3d9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2131 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-storage-init-97lrg line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=76fa1b3d9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2131 identity=12702 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4baef949-e65a-483a-81cd-4661fab81442,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=4baef949-e65a-483a-81cd-4661fab81442,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-storage-init-97lrg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76fa1b3d9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2131 identity=12702 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-storage-init-97lrg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76fa1b3d9d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2131 identity=12702 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-storage-init-97lrg subsys=endpoint level=info msg="Successful endpoint creation" containerID=76fa1b3d9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2131 identity=12702 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-storage-init-97lrg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=76fa1b3d9d endpointID=2131 k8sNamespace=openstack k8sPodName=glance-storage-init-97lrg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4baef949-e65a-483a-81cd-4661fab81442 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=4baef949-e65a-483a-81cd-4661fab81442 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=76fa1b3d9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2131 identity=12702 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-storage-init-97lrg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 492f9d19-6dbe-4cef-8723-e13ef5d51220 default }" containerID=13dffe371b2568dbb9822f4b60a63c86c3fc5fd83abe46bfff114c2dfd37f361 datapathConfiguration="&{false false false false false }" interface=lxc552bee85a3ab k8sPodName=openstack/glance-api-84867b86f6-9kqzp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13dffe371b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1079 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-api-84867b86f6-9kqzp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13dffe371b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1079 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-api-84867b86f6-9kqzp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=13dffe371b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1079 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-api-84867b86f6-9kqzp line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=13dffe371b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1079 identity=28055 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-api-84867b86f6-9kqzp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13dffe371b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1079 identity=28055 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-api-84867b86f6-9kqzp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=13dffe371b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1079 identity=28055 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-api-84867b86f6-9kqzp subsys=endpoint level=info msg="Successful endpoint creation" containerID=13dffe371b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1079 identity=28055 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-api-84867b86f6-9kqzp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.9 c84cf248-b71f-4d65-8446-e1183ea0f447 default }" containerID=901cc0ab02c27baeb696067dc786f20e3e941c4539e85fc0ce5121d9c350dbf8 datapathConfiguration="&{false false false false false }" interface=lxc11f4e6a5987b k8sPodName=openstack/staffeln-conductor-7db8b9c7d8-mlks4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=901cc0ab02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=928 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-conductor-7db8b9c7d8-mlks4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=901cc0ab02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=928 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-conductor-7db8b9c7d8-mlks4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.191 a95d103a-64fa-48d5-ad4a-35c05451024f default }" containerID=acce1299298b9a4a13314eb1ed79c0cd6a3abe9a4b0d80d82e5d7db5e9261c71 datapathConfiguration="&{false false false false false }" interface=lxc8447bf8fbcbe k8sPodName=openstack/staffeln-api-59f4996d5f-vktt2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=acce129929 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/staffeln-api-59f4996d5f-vktt2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=acce129929 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/staffeln-api-59f4996d5f-vktt2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=acce129929 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.191 ipv6= k8sPodName=openstack/staffeln-api-59f4996d5f-vktt2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=901cc0ab02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=928 identity=51830 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-conductor-7db8b9c7d8-mlks4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=901cc0ab02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=928 identity=51830 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-conductor-7db8b9c7d8-mlks4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=acce129929 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 identity=15861 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/staffeln-api-59f4996d5f-vktt2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=acce129929 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 identity=15861 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/staffeln-api-59f4996d5f-vktt2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 009a8112-e63f-4874-af69-d40f1e683868 default }" containerID=f8128c47c332918dbc0bf4a8c60a1d13d26aadb74e631e2a789f1fed5079f349 datapathConfiguration="&{false false false false false }" interface=lxc4982fa3d53f4 k8sPodName=openstack/staffeln-db-init-d5z72 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8128c47c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-init-d5z72 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8128c47c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=2a27b3ac-38f7-43df-988c-ad1a19e3215d,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=2a27b3ac-38f7-43df-988c-ad1a19e3215d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-init-d5z72 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=2a27b3ac-38f7-43df-988c-ad1a19e3215d;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=2a27b3ac-38f7-43df-988c-ad1a19e3215d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8128c47c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identity=11613 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=2a27b3ac-38f7-43df-988c-ad1a19e3215d,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=2a27b3ac-38f7-43df-988c-ad1a19e3215d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-init-d5z72 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8128c47c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identity=11613 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-init-d5z72 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=901cc0ab02 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=928 identity=51830 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-conductor-7db8b9c7d8-mlks4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=901cc0ab02 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=928 identity=51830 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-conductor-7db8b9c7d8-mlks4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=acce129929 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2145 identity=15861 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/staffeln-api-59f4996d5f-vktt2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=acce129929 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2145 identity=15861 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/staffeln-api-59f4996d5f-vktt2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f8128c47c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=74 identity=11613 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-init-d5z72 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8128c47c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=74 identity=11613 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-init-d5z72 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f8128c47c3 endpointID=74 k8sNamespace=openstack k8sPodName=staffeln-db-init-d5z72 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=2a27b3ac-38f7-43df-988c-ad1a19e3215d k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=2a27b3ac-38f7-43df-988c-ad1a19e3215d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=f8128c47c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=74 identity=11613 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/staffeln-db-init-d5z72 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 7591213a-8673-4284-bf2f-8c62a0bd8270 default }" containerID=47a3535fc9193d9c01fb13fca632464e3143341090531ce42742133906f2ddc5 datapathConfiguration="&{false false false false false }" interface=lxc05bb0b13e3bd k8sPodName=openstack/staffeln-db-sync-zqlpq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47a3535fc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-db-sync-zqlpq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47a3535fc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=2b6c8f67-5ef1-41d2-9ce0-d8366bde72a1,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=2b6c8f67-5ef1-41d2-9ce0-d8366bde72a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-db-sync-zqlpq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=2b6c8f67-5ef1-41d2-9ce0-d8366bde72a1;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=2b6c8f67-5ef1-41d2-9ce0-d8366bde72a1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47a3535fc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identity=10308 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=2b6c8f67-5ef1-41d2-9ce0-d8366bde72a1,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=2b6c8f67-5ef1-41d2-9ce0-d8366bde72a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-db-sync-zqlpq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=47a3535fc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identity=10308 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-db-sync-zqlpq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=47a3535fc9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1322 identity=10308 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-db-sync-zqlpq subsys=endpoint level=info msg="Successful endpoint creation" containerID=47a3535fc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1322 identity=10308 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-db-sync-zqlpq subsys=daemon