level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.005715ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="64.051µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.009746ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="8.251µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=91.821699ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="11.551µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="13.6µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="46.132µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="52.031µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="62.962µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="404.311µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.51µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.149779ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.282878ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="45.431µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="53.891µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="264.206µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="106.653µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="78.202µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=44.058934ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="82.352µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="11.291µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.250.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=102.23216ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="10.33µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.847636ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="5.48µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.121454ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.72µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="17.521µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="3.65µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.82µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.98µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="44.311µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="36.021µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="78.642µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="501.123µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="6.34µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="16.791µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="171.755µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="730.939µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="988.904µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.51µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="17.591µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.250 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.250 ipAddr.ipv6="" k8sNodeIP=199.204.45.250 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.250" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.129" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.250" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.250} {CiliumInternalIP 10.0.0.129}] 10.0.0.0/24 [] [] 10.0.0.250 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:34301" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.408591025s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="15.07µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="9.38µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="34.391µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="7.53µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1780 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1780 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1780 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.337273288s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.189 c1820189-fdd9-4f2a-8a41-30cf3750c3ef default }" containerID=bcab52943618b5b301e506ffdb8208591f5cc2a6f740577ace3e2380c4348ee7 datapathConfiguration="&{false false false false false }" interface=lxcc65415cfcdc5 k8sPodName=kube-system/coredns-7c96b6546b-mvm6s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bcab529436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 ipv4=10.0.0.189 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mvm6s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bcab529436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.189 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mvm6s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.65 b963df73-4dbd-4fff-b3b4-dd0556727bec default }" containerID=e2f3c8008783992fd2e64dc6a493e91b83ad632970bade6715562d6e7d036ed4 datapathConfiguration="&{false false false false false }" interface=lxc341870f82b41 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gj5vg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2f3c80087 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=319 ipv4=10.0.0.65 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gj5vg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2f3c80087 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=319 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=747c2dfd-86f3-4b7c-96b6-bb137511e012,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=747c2dfd-86f3-4b7c-96b6-bb137511e012,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.65 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gj5vg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e2f3c80087 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=319 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.65 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gj5vg line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=bcab529436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.189 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mvm6s line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bcab529436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=49918 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.189 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mvm6s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bcab529436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=49918 ipv4=10.0.0.189 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mvm6s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=747c2dfd-86f3-4b7c-96b6-bb137511e012;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=747c2dfd-86f3-4b7c-96b6-bb137511e012;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2f3c80087 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=319 identity=22858 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=747c2dfd-86f3-4b7c-96b6-bb137511e012,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=747c2dfd-86f3-4b7c-96b6-bb137511e012,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.65 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gj5vg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2f3c80087 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=319 identity=22858 ipv4=10.0.0.65 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gj5vg subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=324.54463ms file-path=/var/run/cilium/state/templates/9e50287ca915c91f9a8376aa7efe8f4219d835660d136796f0ec877f9defd2c8/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1780 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1186 ipv4=10.0.0.250 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1186 identityLabels="reserved:health" ipv4=10.0.0.250 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1186 identity=4 identityLabels="reserved:health" ipv4=10.0.0.250 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.092095667s file-path=/var/run/cilium/state/templates/3b9c4eb0bfd21d61addaa825d45cd005babdc079ecfd91bff8333065efc132ff/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=bcab529436 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1433 identity=49918 ipv4=10.0.0.189 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mvm6s subsys=endpoint level=info msg="Successful endpoint creation" containerID=bcab529436 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1433 identity=49918 ipv4=10.0.0.189 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mvm6s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e2f3c80087 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=319 identity=22858 ipv4=10.0.0.65 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gj5vg subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2f3c80087 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=319 identity=22858 ipv4=10.0.0.65 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gj5vg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1186 identity=4 ipv4=10.0.0.250 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e2f3c80087 endpointID=319 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-gj5vg subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=747c2dfd-86f3-4b7c-96b6-bb137511e012 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=747c2dfd-86f3-4b7c-96b6-bb137511e012 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=e2f3c80087 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=319 identity=22858 ipv4=10.0.0.65 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-gj5vg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 bdfba47f-0210-4479-859f-91d85aa98e03 default }" containerID=6e7ec08c40364e110614ec617dd6961230d93e34a7963d13036cc65eeaf28511 datapathConfiguration="&{false false false false false }" interface=lxc01dab6288519 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wdt8q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e7ec08c40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2786 ipv4=10.0.0.234 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wdt8q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e7ec08c40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2786 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.234 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wdt8q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6e7ec08c40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2786 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wdt8q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e7ec08c40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2786 identity=40944 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.234 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wdt8q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e7ec08c40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2786 identity=40944 ipv4=10.0.0.234 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wdt8q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e7ec08c40 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2786 identity=40944 ipv4=10.0.0.234 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wdt8q subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e7ec08c40 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2786 identity=40944 ipv4=10.0.0.234 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wdt8q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1780 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01780 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01780 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01780 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01780:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1780 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 f7d5cd16-fc71-471d-b88f-cf19566b57f8 default }" containerID=7b30702bc0d381d2f96b317923fc6e6c1d864c93ea78deb422790a7937e5348e datapathConfiguration="&{false false false false false }" interface=lxcfee299d38aa3 k8sPodName=kube-system/coredns-67659f764b-pfj9c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b30702bc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-pfj9c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b30702bc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-pfj9c subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7b30702bc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identity=49918 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-pfj9c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b30702bc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identity=49918 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-pfj9c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b30702bc0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=838 identity=49918 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-pfj9c subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b30702bc0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=838 identity=49918 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-pfj9c subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.215 1bed8513-32a9-4e87-8a65-8d5aa1e9d752 default }" containerID=5778df34e0050fbb8029505b4748551fb2352ac4cfb742f8a2a6f3575a00ab7d datapathConfiguration="&{false false false false false }" interface=lxceaa5d47f1616 k8sPodName=kube-system/coredns-67659f764b-xv9xd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5778df34e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 ipv4=10.0.0.215 ipv6= k8sPodName=kube-system/coredns-67659f764b-xv9xd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5778df34e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.215 ipv6= k8sPodName=kube-system/coredns-67659f764b-xv9xd subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5778df34e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 identity=49918 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.215 ipv6= k8sPodName=kube-system/coredns-67659f764b-xv9xd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5778df34e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 identity=49918 ipv4=10.0.0.215 ipv6= k8sPodName=kube-system/coredns-67659f764b-xv9xd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5778df34e0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1876 identity=49918 ipv4=10.0.0.215 ipv6= k8sPodName=kube-system/coredns-67659f764b-xv9xd subsys=endpoint level=info msg="Successful endpoint creation" containerID=5778df34e0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1876 identity=49918 ipv4=10.0.0.215 ipv6= k8sPodName=kube-system/coredns-67659f764b-xv9xd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.143 481e0c5c-f69e-4b30-96a7-58e2afb79cbd default }" containerID=01b22f4444cb8dc6f5a36b7aa4db623a32dba12042ce5f1fc3979793e9149eb3 datapathConfiguration="&{false false false false false }" interface=lxca4bf8a7ef99b k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dzwch labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01b22f4444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dzwch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01b22f4444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dzwch subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01b22f4444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 identity=3491 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dzwch oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01b22f4444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 identity=3491 ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dzwch subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=01b22f4444 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1172 identity=3491 ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dzwch subsys=endpoint level=info msg="Successful endpoint creation" containerID=01b22f4444 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1172 identity=3491 ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dzwch subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bcab529436 endpointID=1433 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-mvm6s subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=bcab529436 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1433 identity=49918 ipv4=10.0.0.189 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mvm6s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 f312f642-c562-475c-abb7-5cfb9734cdef default }" containerID=deafee9d6b1d5ed84af6552033df7f15d98f1ec09ea98cb1d8a0eeefe9e5993a datapathConfiguration="&{false false false false false }" interface=lxcdb9b44a8e27a k8sPodName=cert-manager/cert-manager-75c4c745bc-crg22 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=deafee9d6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 ipv4=10.0.0.86 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-crg22 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=deafee9d6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.86 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-crg22 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=deafee9d6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identity=61261 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.86 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-crg22 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=deafee9d6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identity=61261 ipv4=10.0.0.86 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-crg22 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.109 29518006-1783-4936-a30d-97da6dabf3c1 default }" containerID=415306f071e0fb92c6e910147536948c06a5a585c94a9e39c3f372557d13a630 datapathConfiguration="&{false false false false false }" interface=lxc3c17f053e8a1 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7jdkt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=415306f071 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=607 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7jdkt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=415306f071 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=607 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7jdkt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.157 c923307c-a87c-440d-a348-3d12cd0f2214 default }" containerID=47a60ea67ef8e99c8886c67b009023ab23504077a9df51972593d9989ced3e64 datapathConfiguration="&{false false false false false }" interface=lxc45cb7ec7e242 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lrx9g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47a60ea67e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1054 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lrx9g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47a60ea67e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1054 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lrx9g subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=415306f071 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=607 identity=19200 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7jdkt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=415306f071 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=607 identity=19200 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7jdkt subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47a60ea67e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1054 identity=25246 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lrx9g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47a60ea67e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1054 identity=25246 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lrx9g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=deafee9d6b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=289 identity=61261 ipv4=10.0.0.86 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-crg22 subsys=endpoint level=info msg="Successful endpoint creation" containerID=deafee9d6b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=289 identity=61261 ipv4=10.0.0.86 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-crg22 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=415306f071 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=607 identity=19200 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7jdkt subsys=endpoint level=info msg="Successful endpoint creation" containerID=415306f071 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=607 identity=19200 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-7jdkt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=47a60ea67e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1054 identity=25246 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lrx9g subsys=endpoint level=info msg="Successful endpoint creation" containerID=47a60ea67e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1054 identity=25246 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lrx9g subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.93 19fb1164-1aca-4c72-b4c1-548418f086ab default }" containerID=c8908863190b0679eabb9bb95ea997eba1b9476a39413f86c12a1837a32ae360 datapathConfiguration="&{false false false false false }" interface=lxca0d306041f86 k8sPodName=cert-manager/cert-manager-startupapicheck-4w4jr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c890886319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4w4jr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c890886319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=4f979023-df4e-4c30-8d9a-aa3d875cb60d,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=4f979023-df4e-4c30-8d9a-aa3d875cb60d,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4w4jr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=4f979023-df4e-4c30-8d9a-aa3d875cb60d;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=4f979023-df4e-4c30-8d9a-aa3d875cb60d;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c890886319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identity=1201 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=4f979023-df4e-4c30-8d9a-aa3d875cb60d,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=4f979023-df4e-4c30-8d9a-aa3d875cb60d,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4w4jr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c890886319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identity=1201 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4w4jr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c890886319 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=524 identity=1201 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4w4jr subsys=endpoint level=info msg="Successful endpoint creation" containerID=c890886319 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=524 identity=1201 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4w4jr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c890886319 endpointID=524 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-4w4jr subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=4f979023-df4e-4c30-8d9a-aa3d875cb60d k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=4f979023-df4e-4c30-8d9a-aa3d875cb60d k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=c890886319 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=524 identity=1201 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4w4jr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 7369862f-765b-4f1e-9202-9fe40e7c3790 default }" containerID=e759e43a6319f2f2cd918f5898819414b668749317fe80a3d7370ba5e125221f datapathConfiguration="&{false false false false false }" interface=lxcaa797b9b6238 k8sPodName=ingress-nginx/ingress-nginx-admission-create-q44cc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e759e43a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3114 ipv4=10.0.0.118 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q44cc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e759e43a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3114 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=72d9befe-c459-41c6-a698-a966b1c826ff,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=72d9befe-c459-41c6-a698-a966b1c826ff,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.118 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q44cc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e759e43a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3114 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.118 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q44cc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=72d9befe-c459-41c6-a698-a966b1c826ff;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=72d9befe-c459-41c6-a698-a966b1c826ff;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e759e43a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3114 identity=42860 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=72d9befe-c459-41c6-a698-a966b1c826ff,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=72d9befe-c459-41c6-a698-a966b1c826ff,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.118 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q44cc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e759e43a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3114 identity=42860 ipv4=10.0.0.118 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q44cc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e759e43a63 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3114 identity=42860 ipv4=10.0.0.118 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q44cc subsys=endpoint level=info msg="Successful endpoint creation" containerID=e759e43a63 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3114 identity=42860 ipv4=10.0.0.118 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q44cc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e759e43a63 endpointID=3114 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-q44cc subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=72d9befe-c459-41c6-a698-a966b1c826ff k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=72d9befe-c459-41c6-a698-a966b1c826ff k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=e759e43a63 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3114 identity=42860 ipv4=10.0.0.118 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q44cc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 43ef0335-0602-4cdb-af52-21368ebdf4e6 default }" containerID=00ce4489de077339e9cc61f5b6da732fb4a200b3ef480b5088b03152073f418a datapathConfiguration="&{false false false false false }" interface=lxcd9013d76f25e k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-vjqx4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00ce4489de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-vjqx4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00ce4489de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-vjqx4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=00ce4489de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-vjqx4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00ce4489de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=19009 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-vjqx4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00ce4489de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=19009 ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-vjqx4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00ce4489de datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=560 identity=19009 ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-vjqx4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=00ce4489de datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=560 identity=19009 ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-vjqx4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.146 e366ad3e-708b-4ae6-a71a-350744a83998 default }" containerID=ff396f0d7e062e0d827d3bb0dece5b731709b152419088ea88565dffd08e2ca6 datapathConfiguration="&{false false false false false }" interface=lxce4d74e5e043b k8sPodName=ingress-nginx/ingress-nginx-admission-patch-d9d2k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff396f0d7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=516 ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-d9d2k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff396f0d7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=516 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ae697e89-027a-4b44-9ece-d11eb8cef2ac,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=ae697e89-027a-4b44-9ece-d11eb8cef2ac,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-d9d2k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=ae697e89-027a-4b44-9ece-d11eb8cef2ac;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=ae697e89-027a-4b44-9ece-d11eb8cef2ac;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff396f0d7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=516 identity=13120 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ae697e89-027a-4b44-9ece-d11eb8cef2ac,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=ae697e89-027a-4b44-9ece-d11eb8cef2ac,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-d9d2k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff396f0d7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=516 identity=13120 ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-d9d2k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff396f0d7e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=516 identity=13120 ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-d9d2k subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff396f0d7e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=516 identity=13120 ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-d9d2k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ff396f0d7e endpointID=516 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-d9d2k subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=ae697e89-027a-4b44-9ece-d11eb8cef2ac k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=ae697e89-027a-4b44-9ece-d11eb8cef2ac k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=ff396f0d7e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=516 identity=13120 ipv4=10.0.0.146 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-d9d2k subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=73614007-7859-4b85-91eb-d5c9288f3da7] Description:}]" policyAddRequest=f974720a-377b-478d-92ce-219d9e61c56a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f974720a-377b-478d-92ce-219d9e61c56a policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=11610052-e68d-49f8-8224-0a00def9a202] Description:}]" policyAddRequest=f914a716-9063-4a3f-baa0-d7a934f87067 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f914a716-9063-4a3f-baa0-d7a934f87067 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.123 d42694a3-ac12-43af-a64b-07155b73ce35 default }" containerID=70f60a9573ad5f476bf320d8619c25275497e103f089a5d2abc6948684883f24 datapathConfiguration="&{false false false false false }" interface=lxcddc05eadc646 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-wvxhr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70f60a9573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1954 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-wvxhr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70f60a9573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1954 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-wvxhr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=70f60a9573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1954 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-wvxhr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70f60a9573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1954 identity=24717 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-wvxhr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70f60a9573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1954 identity=24717 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-wvxhr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=70f60a9573 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1954 identity=24717 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-wvxhr subsys=endpoint level=info msg="Successful endpoint creation" containerID=70f60a9573 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1954 identity=24717 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-wvxhr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.167 8bccd0d9-4f14-4c90-87e3-e6d30592ff77 default }" containerID=1a1e49ed2190ad74e71f19466accda09088e5cf3962572d5b785265e3db11c1f datapathConfiguration="&{false false false false false }" interface=lxcba2f1a71fec5 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9549r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a1e49ed21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9549r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a1e49ed21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9549r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a1e49ed21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 identity=32989 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9549r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a1e49ed21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 identity=32989 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9549r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a1e49ed21 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1240 identity=32989 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9549r subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a1e49ed21 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1240 identity=32989 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9549r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.203 09618e6a-bbb5-4ecc-8496-07aa440acf83 default }" containerID=a091138a120282fddb780957f4fece02ca0b1b07151a5b061803f22b5ba09025 datapathConfiguration="&{false false false false false }" interface=lxc9bb20e06fa17 k8sPodName=openstack/pxc-operator-69cb5bbdb9-tq245 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a091138a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tq245 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a091138a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tq245 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a091138a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.203 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tq245 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a091138a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identity=30412 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tq245 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a091138a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identity=30412 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tq245 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a091138a12 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=260 identity=30412 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tq245 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a091138a12 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=260 identity=30412 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tq245 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.114 e7009b5e-72db-4886-9020-43b1d255d7e8 default }" containerID=3b9360e19a0be67dd1003dd98f195713a5ed2be0b91fe5c60c61a3347073fb19 datapathConfiguration="&{false false false false false }" interface=lxcbd57cc933ab0 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b9360e19a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b9360e19a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b9360e19a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identity=40244 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b9360e19a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identity=40244 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3b9360e19a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=197 identity=40244 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b9360e19a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=197 identity=40244 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.151 9a66cb0a-3f9b-475e-8690-70f9f70d193c default }" containerID=0d2e648985ec33ec13a6f77aa23d63fda8b815e2992e00ac2423d5eef0980997 datapathConfiguration="&{false false false false false }" interface=lxc4574e14cfd5b k8sPodName=local-path-storage/helper-pod-create-pvc-5364112b-f2b7-4fce-81d6-c22e45150156 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d2e648985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5364112b-f2b7-4fce-81d6-c22e45150156 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d2e648985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5364112b-f2b7-4fce-81d6-c22e45150156 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d2e648985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identity=16944 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5364112b-f2b7-4fce-81d6-c22e45150156 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d2e648985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identity=16944 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5364112b-f2b7-4fce-81d6-c22e45150156 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d2e648985 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1918 identity=16944 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5364112b-f2b7-4fce-81d6-c22e45150156 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d2e648985 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1918 identity=16944 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5364112b-f2b7-4fce-81d6-c22e45150156 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0d2e648985 endpointID=1918 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5364112b-f2b7-4fce-81d6-c22e45150156 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0d2e648985 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1918 identity=16944 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5364112b-f2b7-4fce-81d6-c22e45150156 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 7786d101-2616-4548-8269-c2fd16b9dc6d default }" containerID=2597bf215055efacd8bcd7fd66e05b8e0339053db0228b01b5143990e9102960 datapathConfiguration="&{false false false false false }" interface=lxce9f539f53492 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2597bf2150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1968 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2597bf2150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1968 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2597bf2150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1968 identity=14882 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2597bf2150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1968 identity=14882 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2597bf2150 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1968 identity=14882 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2597bf2150 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1968 identity=14882 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=230f9762-86da-4ecd-b216-d1ba05d568b1] Description:}]" policyAddRequest=0af245fb-3ab1-4962-bb90-3bacb9adcc4d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0af245fb-3ab1-4962-bb90-3bacb9adcc4d policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.175 dd80e50a-5652-47e0-b579-8e9e24b7985b default }" containerID=14d89997eb6630cfcd5b9b685417cf92e64c084fa770d960ff7ab91eece94e1f datapathConfiguration="&{false false false false false }" interface=lxc9a5f94691243 k8sPodName=local-path-storage/helper-pod-create-pvc-107e2720-3bef-4cad-b383-3fa12e9afc07 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14d89997eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=810 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-107e2720-3bef-4cad-b383-3fa12e9afc07 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14d89997eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=810 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-107e2720-3bef-4cad-b383-3fa12e9afc07 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14d89997eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=810 identity=16944 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-107e2720-3bef-4cad-b383-3fa12e9afc07 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14d89997eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=810 identity=16944 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-107e2720-3bef-4cad-b383-3fa12e9afc07 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14d89997eb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=810 identity=16944 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-107e2720-3bef-4cad-b383-3fa12e9afc07 subsys=endpoint level=info msg="Successful endpoint creation" containerID=14d89997eb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=810 identity=16944 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-107e2720-3bef-4cad-b383-3fa12e9afc07 subsys=daemon level=info msg="Delete endpoint request" containerID=14d89997eb endpointID=810 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-107e2720-3bef-4cad-b383-3fa12e9afc07 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=14d89997eb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=810 identity=16944 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-107e2720-3bef-4cad-b383-3fa12e9afc07 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 9b34533c-2211-4716-94b1-c1559a753be2 default }" containerID=f3be3d17cf3b833cc58a8f6a575a79a427f0a79fcb2dae28614e3128ef227bba datapathConfiguration="&{false false false false false }" interface=lxc07dd68c5d4d3 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3be3d17cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1883 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3be3d17cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1883 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3be3d17cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1883 identity=60966 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f3be3d17cf datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1883 identity=60966 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f3be3d17cf datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1883 identity=60966 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3be3d17cf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1883 identity=60966 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=05558061-c1d9-4141-8212-fa9c05b8f951] Description:}]" policyAddRequest=109ce2f5-f2f4-42a8-ac17-deb0ff55c2bf subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=109ce2f5-f2f4-42a8-ac17-deb0ff55c2bf policyRevision=5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.212 4e3c6d68-1e34-4773-9a09-d11d5b8b82bb default }" containerID=9256966d05cb58cb3d8a99bdc9bb848ea4b0e32709bcb92ac0eb67c91a169802 datapathConfiguration="&{false false false false false }" interface=lxcc05671ca32c6 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9256966d05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 ipv4=10.0.0.212 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9256966d05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.212 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9256966d05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 identity=54449 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.212 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9256966d05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 identity=54449 ipv4=10.0.0.212 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9256966d05 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=638 identity=54449 ipv4=10.0.0.212 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9256966d05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=638 identity=54449 ipv4=10.0.0.212 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009512762590122688 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.94 dee0bd23-2d12-41bc-8bb2-236a07f5f988 default }" containerID=4f263c18e268395cb00aa2438c8645702989fc31b63d4586bbc36bafb2047bc6 datapathConfiguration="&{false false false false false }" interface=lxc643e94db37b6 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7qhjn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f263c18e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1324 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7qhjn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f263c18e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1324 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7qhjn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f263c18e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1324 identity=58720 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7qhjn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f263c18e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1324 identity=58720 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7qhjn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.127 4f51d453-9716-4143-8fd0-37c1acd05025 default }" containerID=b0a8b5ace034908b64a9463d7374756a2fbff3beffdc8db77190debbdcfb09d6 datapathConfiguration="&{false false false false false }" interface=lxc0519fd3506af k8sPodName=monitoring/node-feature-discovery-worker-s5794 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0a8b5ace0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-s5794 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0a8b5ace0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-s5794 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.165 42e492eb-75a9-4292-a5b6-ba784165cc3e default }" containerID=81b8e49f97debe8f043067325bc95e07fa69b51c72ce448d7e46d30ffe677ec0 datapathConfiguration="&{false false false false false }" interface=lxcd3a0f6461789 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rxnr5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81b8e49f97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=666 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rxnr5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81b8e49f97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=666 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rxnr5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=b0a8b5ace0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 identity=5291 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-s5794 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0a8b5ace0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 identity=5291 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-s5794 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81b8e49f97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=666 identity=3597 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rxnr5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81b8e49f97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=666 identity=3597 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rxnr5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f263c18e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1324 identity=58720 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7qhjn subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f263c18e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1324 identity=58720 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7qhjn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=81b8e49f97 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=666 identity=3597 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rxnr5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81b8e49f97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=666 identity=3597 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rxnr5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b0a8b5ace0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1706 identity=5291 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-s5794 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0a8b5ace0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1706 identity=5291 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-s5794 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.163 8c9f2601-8a1d-4a1f-b22c-2aafa5e3014c default }" containerID=abc172d99e50628a2a2ac41cec3f93997256b1f0eae718774a580cce20b02e6e datapathConfiguration="&{false false false false false }" interface=lxc34df673c06cb k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qrbpx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abc172d99e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 ipv4=10.0.0.163 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qrbpx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abc172d99e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.163 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qrbpx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abc172d99e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 identity=8511 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.163 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qrbpx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=abc172d99e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 identity=8511 ipv4=10.0.0.163 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qrbpx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=abc172d99e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=628 identity=8511 ipv4=10.0.0.163 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qrbpx subsys=endpoint level=info msg="Successful endpoint creation" containerID=abc172d99e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=628 identity=8511 ipv4=10.0.0.163 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qrbpx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1780 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01780 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01780 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01780 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01780:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1780 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 ea9316b9-cb1b-4d7b-b783-9320b9fe13e8 default }" containerID=38de537e8cf3d5acdd5b36aa43e20ddf8cacfee940d311b7bb0df02181ed0ba3 datapathConfiguration="&{false false false false false }" interface=lxc9c53f7b9d91b k8sPodName=monitoring/kube-prometheus-stack-admission-create-88fgz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38de537e8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=870 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-88fgz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38de537e8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=870 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=e4840082-2445-4a18-ba0b-243a1db087a5,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e4840082-2445-4a18-ba0b-243a1db087a5,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-88fgz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=e4840082-2445-4a18-ba0b-243a1db087a5;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=e4840082-2445-4a18-ba0b-243a1db087a5;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=38de537e8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=870 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-88fgz line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=38de537e8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=870 identity=53295 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=e4840082-2445-4a18-ba0b-243a1db087a5,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e4840082-2445-4a18-ba0b-243a1db087a5,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-88fgz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38de537e8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=870 identity=53295 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-88fgz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38de537e8c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=870 identity=53295 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-88fgz subsys=endpoint level=info msg="Successful endpoint creation" containerID=38de537e8c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=870 identity=53295 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-88fgz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=38de537e8c endpointID=870 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-88fgz subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=e4840082-2445-4a18-ba0b-243a1db087a5 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=e4840082-2445-4a18-ba0b-243a1db087a5 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=38de537e8c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=870 identity=53295 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-88fgz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 8119d6e4-91f4-47e7-a98a-17e954b65a6a default }" containerID=aa13a5c607f64d7922f6dff6d4d94349f287b8432c11a3bd901bf54d1ba9a665 datapathConfiguration="&{false false false false false }" interface=lxcafb8ecffb502 k8sPodName=monitoring/kube-prometheus-stack-grafana-6bdb95bf76-5gnhq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa13a5c607 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bdb95bf76-5gnhq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa13a5c607 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bdb95bf76-5gnhq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.147 514b566b-049e-4b03-8b3e-58b657209f55 default }" containerID=53da7e6d3a806478cf158eddc827069f1e46d6f504accea4d77a52ff0c325fcd datapathConfiguration="&{false false false false false }" interface=lxc6916bc385dc9 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9vmr7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53da7e6d3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9vmr7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53da7e6d3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9vmr7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=aa13a5c607 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bdb95bf76-5gnhq line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=53da7e6d3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9vmr7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa13a5c607 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identity=13599 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bdb95bf76-5gnhq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa13a5c607 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identity=13599 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bdb95bf76-5gnhq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53da7e6d3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 identity=12855 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9vmr7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53da7e6d3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=582 identity=12855 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9vmr7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 60038502-957d-4069-b624-47e9ec4205dd default }" containerID=8b31c3fec62daf2376f1743ee06281ba7e3c062e8a5bbd4068b8ea8269b44bb6 datapathConfiguration="&{false false false false false }" interface=lxc37d66ea06fdf k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mjqwl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b31c3fec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mjqwl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b31c3fec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mjqwl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b31c3fec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identity=49828 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mjqwl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b31c3fec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identity=49828 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mjqwl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa13a5c607 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1244 identity=13599 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bdb95bf76-5gnhq subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa13a5c607 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1244 identity=13599 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bdb95bf76-5gnhq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=53da7e6d3a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=582 identity=12855 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9vmr7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=53da7e6d3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=582 identity=12855 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9vmr7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8b31c3fec6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=92 identity=49828 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mjqwl subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b31c3fec6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=92 identity=49828 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mjqwl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.137 2d487c10-8f02-4a7d-b657-d231f1192821 default }" containerID=605e59075a2cca0cc26933399764cd8941e9e84803d24d75dbf1e5b9df45bdf9 datapathConfiguration="&{false false false false false }" interface=lxcc2bca35f8a50 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-89hkz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=605e59075a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1773 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-89hkz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=605e59075a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1773 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=36d1adc9-9dd5-4af0-87fb-550860714b40,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=36d1adc9-9dd5-4af0-87fb-550860714b40,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-89hkz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=36d1adc9-9dd5-4af0-87fb-550860714b40;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=36d1adc9-9dd5-4af0-87fb-550860714b40;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=605e59075a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1773 identity=11340 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=36d1adc9-9dd5-4af0-87fb-550860714b40,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=36d1adc9-9dd5-4af0-87fb-550860714b40,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-89hkz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=605e59075a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1773 identity=11340 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-89hkz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=605e59075a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1773 identity=11340 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-89hkz subsys=endpoint level=info msg="Successful endpoint creation" containerID=605e59075a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1773 identity=11340 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-89hkz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=605e59075a endpointID=1773 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-89hkz subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=36d1adc9-9dd5-4af0-87fb-550860714b40 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=36d1adc9-9dd5-4af0-87fb-550860714b40 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=605e59075a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1773 identity=11340 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-89hkz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 6fc94794-dff9-49c0-a1bd-6cc6ac4c9444 default }" containerID=177d19ae06dadb427f96624a92e37b8f1b62e7f71b87bc5dd282e27a0a8d4af4 datapathConfiguration="&{false false false false false }" interface=lxc6bcc6ff8e9f7 k8sPodName=local-path-storage/helper-pod-create-pvc-503aaff0-4ee0-479d-a8e0-bbc4c153f848 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=177d19ae06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-503aaff0-4ee0-479d-a8e0-bbc4c153f848 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=177d19ae06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-503aaff0-4ee0-479d-a8e0-bbc4c153f848 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=177d19ae06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identity=16944 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-503aaff0-4ee0-479d-a8e0-bbc4c153f848 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=177d19ae06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identity=16944 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-503aaff0-4ee0-479d-a8e0-bbc4c153f848 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=177d19ae06 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2323 identity=16944 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-503aaff0-4ee0-479d-a8e0-bbc4c153f848 subsys=endpoint level=info msg="Successful endpoint creation" containerID=177d19ae06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2323 identity=16944 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-503aaff0-4ee0-479d-a8e0-bbc4c153f848 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.65 9afed1de-534f-4970-a698-62303d1bcaee default }" containerID=9a8ae22df2abc5dd03936d6183f0f18ced2523d1be8dee3c3a72cf3f48131e41 datapathConfiguration="&{false false false false false }" interface=lxc09ef72ea0f8f k8sPodName=local-path-storage/helper-pod-create-pvc-b6cb3632-b7f2-467c-aafc-377e55a22721 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a8ae22df2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6cb3632-b7f2-467c-aafc-377e55a22721 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a8ae22df2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6cb3632-b7f2-467c-aafc-377e55a22721 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9a8ae22df2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=16944 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6cb3632-b7f2-467c-aafc-377e55a22721 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a8ae22df2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=16944 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6cb3632-b7f2-467c-aafc-377e55a22721 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a8ae22df2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=714 identity=16944 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6cb3632-b7f2-467c-aafc-377e55a22721 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a8ae22df2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=714 identity=16944 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6cb3632-b7f2-467c-aafc-377e55a22721 subsys=daemon level=info msg="Delete endpoint request" containerID=177d19ae06 endpointID=2323 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-503aaff0-4ee0-479d-a8e0-bbc4c153f848 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=177d19ae06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2323 identity=16944 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-503aaff0-4ee0-479d-a8e0-bbc4c153f848 subsys=endpoint level=info msg="Delete endpoint request" containerID=9a8ae22df2 endpointID=714 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b6cb3632-b7f2-467c-aafc-377e55a22721 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9a8ae22df2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=714 identity=16944 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6cb3632-b7f2-467c-aafc-377e55a22721 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 50d29543-0ee4-4202-a00d-ad5b6a5db809 default }" containerID=68ec8381b0504060b25a6ef52be0cdf184b419f73fcfe79abdbc521eece8684a datapathConfiguration="&{false false false false false }" interface=lxc44ccdf6c0568 k8sPodName=monitoring/loki-gateway-cf54cb88c-xs227 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68ec8381b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xs227 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68ec8381b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xs227 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=68ec8381b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xs227 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68ec8381b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 identity=46179 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xs227 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68ec8381b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 identity=46179 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xs227 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68ec8381b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=890 identity=46179 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xs227 subsys=endpoint level=info msg="Successful endpoint creation" containerID=68ec8381b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=890 identity=46179 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xs227 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.223 4cf0a98a-e486-49cc-9e2d-56036dcdb5b2 default }" containerID=75e7e17cd1f6913a088e562ee51e307d36298d025b07d8a576e9367784f7f828 datapathConfiguration="&{false false false false false }" interface=lxcf54c3a5d418f k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75e7e17cd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75e7e17cd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.228 14c38dc8-0dfc-4d7c-a4af-32727c3a9546 default }" containerID=3113cc1ba16426c751f8b02fa0ab447bbe9fc1b35a1e7580b25aa1c2c9514188 datapathConfiguration="&{false false false false false }" interface=lxc9861ff313dbb k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3113cc1ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1376 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3113cc1ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1376 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75e7e17cd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identity=15910 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75e7e17cd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identity=15910 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3113cc1ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1376 identity=37180 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3113cc1ba1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1376 identity=37180 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=75e7e17cd1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=417 identity=15910 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=75e7e17cd1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=417 identity=15910 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3113cc1ba1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1376 identity=37180 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3113cc1ba1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1376 identity=37180 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.136 3d414ec3-4a93-4a4a-9a92-981fc1d6a938 default }" containerID=2789697ed001fe236a701f7fc7669f754b63cc38273f7947d1ddaa4fa412789c datapathConfiguration="&{false false false false false }" interface=lxcab543b2a6413 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2789697ed0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2789697ed0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2789697ed0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 identity=55617 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2789697ed0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 identity=55617 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 d2acd3eb-b023-49e1-9a52-3a3d9c63be92 default }" containerID=f7eec891c4a0fa0842c518eeb4b30f0492657adbbbba1bbc0ae53f54d0e9adc3 datapathConfiguration="&{false false false false false }" interface=lxc5d3672bb6225 k8sPodName=local-path-storage/helper-pod-create-pvc-2e48ef9b-407f-49b7-a407-b1316cd8fe92 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7eec891c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e48ef9b-407f-49b7-a407-b1316cd8fe92 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7eec891c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e48ef9b-407f-49b7-a407-b1316cd8fe92 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7eec891c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=16944 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e48ef9b-407f-49b7-a407-b1316cd8fe92 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7eec891c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=16944 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e48ef9b-407f-49b7-a407-b1316cd8fe92 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2789697ed0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1136 identity=55617 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2789697ed0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1136 identity=55617 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f7eec891c4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=221 identity=16944 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e48ef9b-407f-49b7-a407-b1316cd8fe92 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7eec891c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=221 identity=16944 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e48ef9b-407f-49b7-a407-b1316cd8fe92 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.181 5b52dee7-83d7-4858-974a-4951ef0e4575 default }" containerID=38242a2399875a19f535a7cd5517ca9c4bc15bbc3c3cc89f1ccee9b4fc6047fb datapathConfiguration="&{false false false false false }" interface=lxc40e2252a59e0 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38242a2399 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3561 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38242a2399 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3561 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38242a2399 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3561 identity=860 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38242a2399 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3561 identity=860 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38242a2399 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3561 identity=860 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=38242a2399 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3561 identity=860 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.204 71f32b7e-40cb-40e3-adc6-3b2fa33774a6 default }" containerID=9a24f72a6a473ee7b2ac86be3b121a81a5806f05940d5eb33830807540cf66fa datapathConfiguration="&{false false false false false }" interface=lxcd19688ae3d1a k8sPodName=monitoring/vector-86w2h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a24f72a6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1796 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/vector-86w2h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a24f72a6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1796 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/vector-86w2h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a24f72a6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1796 identity=46829 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/vector-86w2h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a24f72a6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1796 identity=46829 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/vector-86w2h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a24f72a6a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1796 identity=46829 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/vector-86w2h subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a24f72a6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1796 identity=46829 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/vector-86w2h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f7eec891c4 endpointID=221 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2e48ef9b-407f-49b7-a407-b1316cd8fe92 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f7eec891c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=221 identity=16944 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e48ef9b-407f-49b7-a407-b1316cd8fe92 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 f2ca486e-0b6d-4334-af9f-21fa88b1625c default }" containerID=33b6164bd78facda6a4b0e122a5bb6ab6b4da62ccdbff82c2e615b3170d12833 datapathConfiguration="&{false false false false false }" interface=lxcf66a18021360 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33b6164bd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3040 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33b6164bd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3040 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33b6164bd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3040 identity=24934 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33b6164bd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3040 identity=24934 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=33b6164bd7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3040 identity=24934 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=33b6164bd7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3040 identity=24934 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.111 2370cdc6-f015-4446-bfcf-2bf56e9c49ae default }" containerID=dc1c3e8f577d3d00bbcdd832731de6a4b0001c5b2b4fdfd0f0bd2801ec080dfd datapathConfiguration="&{false false false false false }" interface=lxc099b790fff0e k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-4ktpk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc1c3e8f57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2371 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-4ktpk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc1c3e8f57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2371 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-4ktpk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc1c3e8f57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2371 identity=27817 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-4ktpk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc1c3e8f57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2371 identity=27817 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-4ktpk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dc1c3e8f57 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2371 identity=27817 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-4ktpk subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc1c3e8f57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2371 identity=27817 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-4ktpk subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.135 a3bef6ff-b38e-49de-a91c-1836ca077565 default }" containerID=90997772d8d91f8266d13c945a2b5f0010355ddeac1188416937177e4cdfa1b8 datapathConfiguration="&{false false false false false }" interface=lxc72c940752b17 k8sPodName=openstack/memcached-memcached-6479589586-bcg86 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90997772d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bcg86 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90997772d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bcg86 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90997772d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=1766 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bcg86 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=90997772d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=1766 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bcg86 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=90997772d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=152 identity=1766 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bcg86 subsys=endpoint level=info msg="Successful endpoint creation" containerID=90997772d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=152 identity=1766 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bcg86 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.151 e9022d1d-6ed7-4d14-98b6-33c1d62fc943 default }" containerID=a3ea96ca7118968dea733ffd9a9d1172150a84a1fc0c980ec7b263f6c469d505 datapathConfiguration="&{false false false false false }" interface=lxc39d58349660b k8sPodName=local-path-storage/helper-pod-create-pvc-05cf6a73-86b3-4f0a-a0ba-b433905f52ec labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3ea96ca71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05cf6a73-86b3-4f0a-a0ba-b433905f52ec subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3ea96ca71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05cf6a73-86b3-4f0a-a0ba-b433905f52ec subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a3ea96ca71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 identity=16944 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05cf6a73-86b3-4f0a-a0ba-b433905f52ec oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3ea96ca71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 identity=16944 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05cf6a73-86b3-4f0a-a0ba-b433905f52ec subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a3ea96ca71 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2691 identity=16944 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05cf6a73-86b3-4f0a-a0ba-b433905f52ec subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3ea96ca71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2691 identity=16944 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05cf6a73-86b3-4f0a-a0ba-b433905f52ec subsys=daemon level=info msg="Delete endpoint request" containerID=a3ea96ca71 endpointID=2691 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-05cf6a73-86b3-4f0a-a0ba-b433905f52ec subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a3ea96ca71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2691 identity=16944 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05cf6a73-86b3-4f0a-a0ba-b433905f52ec subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 6fbbd63c-d77f-4b60-b5d5-2436c74bec47 default }" containerID=81aace2cdc8f13bd93f2e66f373b6c836681c17db405acb08985fdca75af93be datapathConfiguration="&{false false false false false }" interface=lxc32ec4f5b4120 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81aace2cdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1736 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81aace2cdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1736 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81aace2cdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1736 identity=4732 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81aace2cdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1736 identity=4732 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81aace2cdc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1736 identity=4732 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81aace2cdc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1736 identity=4732 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.240 5ad4e119-e357-4653-a71f-09834f6a659f default }" containerID=f688266410e72c1980486dbaae194c2d0cd22090e6b5200da1f15863b51732c6 datapathConfiguration="&{false false false false false }" interface=lxc457e0085eaf9 k8sPodName=openstack/keystone-api-5f4586f67b-jn5p2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f688266410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-5f4586f67b-jn5p2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f688266410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-5f4586f67b-jn5p2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f688266410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-5f4586f67b-jn5p2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f688266410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identity=2497 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-5f4586f67b-jn5p2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f688266410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identity=2497 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-5f4586f67b-jn5p2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 01446813-ce09-4115-b6b2-c4f81e22eefd default }" containerID=6cb5ada94f99a392dd9cdeca6efd37520290af3f50ef43b83b68718990a0bd18 datapathConfiguration="&{false false false false false }" interface=lxcf543993b67c0 k8sPodName=openstack/keystone-credential-setup-lmb9w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6cb5ada94f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-credential-setup-lmb9w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6cb5ada94f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=96522f3f-643b-4dbd-9e1f-de0557cb872a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=96522f3f-643b-4dbd-9e1f-de0557cb872a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-credential-setup-lmb9w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=96522f3f-643b-4dbd-9e1f-de0557cb872a;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=96522f3f-643b-4dbd-9e1f-de0557cb872a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6cb5ada94f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=8402 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=96522f3f-643b-4dbd-9e1f-de0557cb872a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=96522f3f-643b-4dbd-9e1f-de0557cb872a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-credential-setup-lmb9w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6cb5ada94f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=8402 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-credential-setup-lmb9w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f688266410 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=498 identity=2497 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-5f4586f67b-jn5p2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f688266410 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=498 identity=2497 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-5f4586f67b-jn5p2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6cb5ada94f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=35 identity=8402 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-credential-setup-lmb9w subsys=endpoint level=info msg="Successful endpoint creation" containerID=6cb5ada94f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=35 identity=8402 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-credential-setup-lmb9w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6cb5ada94f endpointID=35 k8sNamespace=openstack k8sPodName=keystone-credential-setup-lmb9w subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=96522f3f-643b-4dbd-9e1f-de0557cb872a k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=96522f3f-643b-4dbd-9e1f-de0557cb872a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6cb5ada94f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=35 identity=8402 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-credential-setup-lmb9w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 f92cd1de-d086-4677-ad37-4e8fbc4443e6 default }" containerID=f38226e81d8fc9e350a1221ee825a5172ec56dcd563b9295952b5158469d1e43 datapathConfiguration="&{false false false false false }" interface=lxc0ecbd423dbaa k8sPodName=openstack/keystone-db-init-vxh8q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f38226e81d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2941 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-vxh8q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f38226e81d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2941 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cd8fbe42-6278-4b92-b886-d88d45128571,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=cd8fbe42-6278-4b92-b886-d88d45128571,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-vxh8q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=cd8fbe42-6278-4b92-b886-d88d45128571;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=cd8fbe42-6278-4b92-b886-d88d45128571;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f38226e81d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2941 identity=20539 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cd8fbe42-6278-4b92-b886-d88d45128571,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=cd8fbe42-6278-4b92-b886-d88d45128571,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-vxh8q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f38226e81d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2941 identity=20539 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-vxh8q subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f38226e81d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2941 identity=20539 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-vxh8q subsys=endpoint level=info msg="Successful endpoint creation" containerID=f38226e81d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2941 identity=20539 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-vxh8q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f38226e81d endpointID=2941 k8sNamespace=openstack k8sPodName=keystone-db-init-vxh8q subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=cd8fbe42-6278-4b92-b886-d88d45128571 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=cd8fbe42-6278-4b92-b886-d88d45128571 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f38226e81d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2941 identity=20539 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-db-init-vxh8q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 20eaa327-3441-48d4-a6c2-4d9f9d4a8b59 default }" containerID=25ca5e588d02f16e9acedb079fad699f0b7e365b39fa663f40ac57b18a706a16 datapathConfiguration="&{false false false false false }" interface=lxc3cc2a91f2aa7 k8sPodName=openstack/keystone-fernet-setup-g74kf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25ca5e588d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3541 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-fernet-setup-g74kf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25ca5e588d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3541 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e4b29ded-d490-48b9-96bb-ce6391c2501d,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=e4b29ded-d490-48b9-96bb-ce6391c2501d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-fernet-setup-g74kf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e4b29ded-d490-48b9-96bb-ce6391c2501d;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=e4b29ded-d490-48b9-96bb-ce6391c2501d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25ca5e588d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3541 identity=55509 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e4b29ded-d490-48b9-96bb-ce6391c2501d,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=e4b29ded-d490-48b9-96bb-ce6391c2501d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-fernet-setup-g74kf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=25ca5e588d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3541 identity=55509 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-fernet-setup-g74kf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=25ca5e588d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3541 identity=55509 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-fernet-setup-g74kf subsys=endpoint level=info msg="Successful endpoint creation" containerID=25ca5e588d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3541 identity=55509 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-fernet-setup-g74kf subsys=daemon level=info msg="Delete endpoint request" containerID=25ca5e588d endpointID=3541 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-g74kf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e4b29ded-d490-48b9-96bb-ce6391c2501d k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=e4b29ded-d490-48b9-96bb-ce6391c2501d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=25ca5e588d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3541 identity=55509 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-fernet-setup-g74kf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 ae1957ad-0e84-4e57-8826-f39830236567 default }" containerID=e68bca628c481f0c11a27846dc22ddd9341f395d769611c0322cb66fef765694 datapathConfiguration="&{false false false false false }" interface=lxc2ded8f0337c4 k8sPodName=openstack/keystone-db-sync-p57k4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e68bca628c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-sync-p57k4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e68bca628c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ef15ec21-a3e2-4483-890e-4d801e210e62,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=ef15ec21-a3e2-4483-890e-4d801e210e62,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-sync-p57k4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e68bca628c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-sync-p57k4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ef15ec21-a3e2-4483-890e-4d801e210e62;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=ef15ec21-a3e2-4483-890e-4d801e210e62;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e68bca628c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=4507 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ef15ec21-a3e2-4483-890e-4d801e210e62,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=ef15ec21-a3e2-4483-890e-4d801e210e62,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-sync-p57k4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e68bca628c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=4507 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-sync-p57k4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e68bca628c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=187 identity=4507 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-sync-p57k4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e68bca628c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=187 identity=4507 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-sync-p57k4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e68bca628c endpointID=187 k8sNamespace=openstack k8sPodName=keystone-db-sync-p57k4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ef15ec21-a3e2-4483-890e-4d801e210e62 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=ef15ec21-a3e2-4483-890e-4d801e210e62 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e68bca628c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=187 identity=4507 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-sync-p57k4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 afd2dee5-0f0c-40d6-9087-d583fdc1476f default }" containerID=e37924379172efaab3d36806086266208d681758f00670789def2d67385e793d datapathConfiguration="&{false false false false false }" interface=lxc575773441539 k8sPodName=openstack/keystone-rabbit-init-xwh58 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e379243791 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-rabbit-init-xwh58 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e379243791 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8e297726-a510-41ce-a870-4feb6b76c662,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8e297726-a510-41ce-a870-4feb6b76c662,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-rabbit-init-xwh58 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e379243791 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-rabbit-init-xwh58 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8e297726-a510-41ce-a870-4feb6b76c662;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=8e297726-a510-41ce-a870-4feb6b76c662;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e379243791 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 identity=5802 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8e297726-a510-41ce-a870-4feb6b76c662,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8e297726-a510-41ce-a870-4feb6b76c662,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-rabbit-init-xwh58 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e379243791 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 identity=5802 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-rabbit-init-xwh58 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e379243791 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2124 identity=5802 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-rabbit-init-xwh58 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e379243791 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2124 identity=5802 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-rabbit-init-xwh58 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e379243791 endpointID=2124 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-xwh58 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8e297726-a510-41ce-a870-4feb6b76c662 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=8e297726-a510-41ce-a870-4feb6b76c662 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e379243791 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2124 identity=5802 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-rabbit-init-xwh58 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 885ad6a5-d72a-4022-ae9b-6d92aa3794aa default }" containerID=544302116e7ccaaf64015cd3e4518f26f07c6c89b140e8733e225a9ed69e6861 datapathConfiguration="&{false false false false false }" interface=lxc055c4c2c7a59 k8sPodName=openstack/keystone-domain-manage-lnbrh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=544302116e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-domain-manage-lnbrh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=544302116e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5c1257d7-82dd-4438-ab7c-f8856adebd63,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=5c1257d7-82dd-4438-ab7c-f8856adebd63,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-domain-manage-lnbrh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5c1257d7-82dd-4438-ab7c-f8856adebd63;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=5c1257d7-82dd-4438-ab7c-f8856adebd63;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=544302116e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 identity=33646 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5c1257d7-82dd-4438-ab7c-f8856adebd63,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=5c1257d7-82dd-4438-ab7c-f8856adebd63,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-domain-manage-lnbrh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=544302116e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 identity=33646 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-domain-manage-lnbrh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=544302116e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2891 identity=33646 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-domain-manage-lnbrh subsys=endpoint level=info msg="Successful endpoint creation" containerID=544302116e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2891 identity=33646 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-domain-manage-lnbrh subsys=daemon level=info msg="Delete endpoint request" containerID=544302116e endpointID=2891 k8sNamespace=openstack k8sPodName=keystone-domain-manage-lnbrh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5c1257d7-82dd-4438-ab7c-f8856adebd63 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=5c1257d7-82dd-4438-ab7c-f8856adebd63 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=544302116e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2891 identity=33646 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-domain-manage-lnbrh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 4e267fcc-4dc9-4f9a-9962-69c83e73bd03 default }" containerID=c04c5c7853b1774e7eab2c508a57d532cf9c787224cbbf3955f276de2613a9cc datapathConfiguration="&{false false false false false }" interface=lxc912286831847 k8sPodName=openstack/keystone-bootstrap-gj5x6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c04c5c7853 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2956 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-bootstrap-gj5x6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c04c5c7853 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2956 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a5ebcf79-fa6c-48ac-abc7-fd99aa1857f9,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=a5ebcf79-fa6c-48ac-abc7-fd99aa1857f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-bootstrap-gj5x6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a5ebcf79-fa6c-48ac-abc7-fd99aa1857f9;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=a5ebcf79-fa6c-48ac-abc7-fd99aa1857f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c04c5c7853 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2956 identity=3309 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a5ebcf79-fa6c-48ac-abc7-fd99aa1857f9,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=a5ebcf79-fa6c-48ac-abc7-fd99aa1857f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-bootstrap-gj5x6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c04c5c7853 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2956 identity=3309 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-bootstrap-gj5x6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c04c5c7853 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2956 identity=3309 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-bootstrap-gj5x6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c04c5c7853 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2956 identity=3309 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-bootstrap-gj5x6 subsys=daemon level=info msg="Delete endpoint request" containerID=c04c5c7853 endpointID=2956 k8sNamespace=openstack k8sPodName=keystone-bootstrap-gj5x6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a5ebcf79-fa6c-48ac-abc7-fd99aa1857f9 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=a5ebcf79-fa6c-48ac-abc7-fd99aa1857f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c04c5c7853 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2956 identity=3309 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-bootstrap-gj5x6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 cb3fbb16-44a3-45e5-b0c2-8986de4fc734 default }" containerID=df13eade5032c78ecd5c1157cff2e28d166227022195f09815515c6e2782aeaf datapathConfiguration="&{false false false false false }" interface=lxcc9e5883f2598 k8sPodName=local-path-storage/helper-pod-create-pvc-ed244bf5-30f4-4e91-9e2c-1001d6529be0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df13eade50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2665 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ed244bf5-30f4-4e91-9e2c-1001d6529be0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df13eade50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2665 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ed244bf5-30f4-4e91-9e2c-1001d6529be0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df13eade50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2665 identity=16944 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ed244bf5-30f4-4e91-9e2c-1001d6529be0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df13eade50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2665 identity=16944 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ed244bf5-30f4-4e91-9e2c-1001d6529be0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df13eade50 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2665 identity=16944 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ed244bf5-30f4-4e91-9e2c-1001d6529be0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=df13eade50 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2665 identity=16944 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ed244bf5-30f4-4e91-9e2c-1001d6529be0 subsys=daemon level=info msg="Delete endpoint request" containerID=df13eade50 endpointID=2665 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ed244bf5-30f4-4e91-9e2c-1001d6529be0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=df13eade50 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2665 identity=16944 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ed244bf5-30f4-4e91-9e2c-1001d6529be0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 b2f843ba-57a4-4c76-a4ca-7d72e746a97d default }" containerID=d8004e94faa8935e7df60dcc2502d0e46809b24f50be2ba4ffefb5bf034036b6 datapathConfiguration="&{false false false false false }" interface=lxc956135a6e1bf k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8004e94fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8004e94fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8004e94fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identity=20783 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d8004e94fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identity=20783 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d8004e94fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=576 identity=20783 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8004e94fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=576 identity=20783 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.17 f9b3093b-574e-4b4f-8399-bb56599b779e default }" containerID=9402f2c37f69352204ba35f50d8630ef4d110a6004fc7781e1b45a21200b2b08 datapathConfiguration="&{false false false false false }" interface=lxcc1bfe194dcab k8sPodName=openstack/barbican-api-5b4cb98588-sq5r9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9402f2c37f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3179 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-api-5b4cb98588-sq5r9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9402f2c37f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3179 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-api-5b4cb98588-sq5r9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9402f2c37f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3179 identity=6554 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-api-5b4cb98588-sq5r9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9402f2c37f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3179 identity=6554 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-api-5b4cb98588-sq5r9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.254 4ef6af70-b6af-4c5a-a2c2-d346f20208cb default }" containerID=f2cb11ca0415702a3e2136d99dcf50ca71b1810c4ff24d0e0a94f10f2b040484 datapathConfiguration="&{false false false false false }" interface=lxc31daaefc01f7 k8sPodName=openstack/barbican-db-init-gqjth labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2cb11ca04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/barbican-db-init-gqjth subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2cb11ca04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=675e857b-51d2-4de8-82ce-7ec276ae9336,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=675e857b-51d2-4de8-82ce-7ec276ae9336,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/barbican-db-init-gqjth subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=675e857b-51d2-4de8-82ce-7ec276ae9336;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=675e857b-51d2-4de8-82ce-7ec276ae9336;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2cb11ca04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identity=19577 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=675e857b-51d2-4de8-82ce-7ec276ae9336,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=675e857b-51d2-4de8-82ce-7ec276ae9336,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/barbican-db-init-gqjth oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2cb11ca04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identity=19577 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/barbican-db-init-gqjth subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9402f2c37f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3179 identity=6554 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-api-5b4cb98588-sq5r9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9402f2c37f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3179 identity=6554 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-api-5b4cb98588-sq5r9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f2cb11ca04 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=95 identity=19577 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/barbican-db-init-gqjth subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2cb11ca04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=95 identity=19577 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/barbican-db-init-gqjth subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03505823312186346 newInterval=11m15s subsys=map-ct level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f2cb11ca04 endpointID=95 k8sNamespace=openstack k8sPodName=barbican-db-init-gqjth subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=675e857b-51d2-4de8-82ce-7ec276ae9336 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=675e857b-51d2-4de8-82ce-7ec276ae9336 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f2cb11ca04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=95 identity=19577 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/barbican-db-init-gqjth subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 ecaa0305-2c96-44d7-a64b-5d179cb8f6df default }" containerID=4cab7bfc7b9823711ec9e4d9b679270e1154d86d7369b8fdbdaac639a36b24af datapathConfiguration="&{false false false false false }" interface=lxcc9749c0ab2e2 k8sPodName=openstack/barbican-db-sync-tk8fq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4cab7bfc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-sync-tk8fq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4cab7bfc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5a2e6e21-3c33-49a1-bc63-38362f58dac4,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=5a2e6e21-3c33-49a1-bc63-38362f58dac4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-sync-tk8fq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5a2e6e21-3c33-49a1-bc63-38362f58dac4;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=5a2e6e21-3c33-49a1-bc63-38362f58dac4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4cab7bfc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 identity=15265 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5a2e6e21-3c33-49a1-bc63-38362f58dac4,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=5a2e6e21-3c33-49a1-bc63-38362f58dac4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-sync-tk8fq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4cab7bfc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 identity=15265 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-sync-tk8fq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4cab7bfc7b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2691 identity=15265 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-sync-tk8fq subsys=endpoint level=info msg="Successful endpoint creation" containerID=4cab7bfc7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2691 identity=15265 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-sync-tk8fq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4cab7bfc7b endpointID=2691 k8sNamespace=openstack k8sPodName=barbican-db-sync-tk8fq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5a2e6e21-3c33-49a1-bc63-38362f58dac4 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=5a2e6e21-3c33-49a1-bc63-38362f58dac4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4cab7bfc7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2691 identity=15265 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-sync-tk8fq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 e1cfa015-5103-48c4-94b6-7b8835aea211 default }" containerID=b942267524252d4771ebad98edd7aaa3b416a89dd25942c31f6e76ec54c85854 datapathConfiguration="&{false false false false false }" interface=lxc913c1690533d k8sPodName=openstack/barbican-rabbit-init-9cxpb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b942267524 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-rabbit-init-9cxpb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b942267524 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1f82cd3d-027c-42c3-abb7-f5efe06d7acb,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1f82cd3d-027c-42c3-abb7-f5efe06d7acb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-rabbit-init-9cxpb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1f82cd3d-027c-42c3-abb7-f5efe06d7acb;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1f82cd3d-027c-42c3-abb7-f5efe06d7acb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b942267524 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identity=32545 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1f82cd3d-027c-42c3-abb7-f5efe06d7acb,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1f82cd3d-027c-42c3-abb7-f5efe06d7acb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-rabbit-init-9cxpb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b942267524 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identity=32545 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-rabbit-init-9cxpb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b942267524 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=186 identity=32545 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-rabbit-init-9cxpb subsys=endpoint level=info msg="Successful endpoint creation" containerID=b942267524 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=186 identity=32545 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-rabbit-init-9cxpb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b942267524 endpointID=186 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-9cxpb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1f82cd3d-027c-42c3-abb7-f5efe06d7acb k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1f82cd3d-027c-42c3-abb7-f5efe06d7acb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b942267524 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=186 identity=32545 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-rabbit-init-9cxpb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 947e255c-1daf-4efb-b7a6-e62e1e16b48b default }" containerID=372e0c7c38668dcf3f5198ed11876c3f56b871c27e39c32bd795eb4f224317fb datapathConfiguration="&{false false false false false }" interface=lxcb67e2465626e k8sPodName=openstack/barbican-ks-service-lhsc2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=372e0c7c38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-service-lhsc2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=372e0c7c38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4452b932-f1ed-4203-86c2-1365387408b6,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=4452b932-f1ed-4203-86c2-1365387408b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-service-lhsc2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4452b932-f1ed-4203-86c2-1365387408b6;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=4452b932-f1ed-4203-86c2-1365387408b6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=372e0c7c38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 identity=32090 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4452b932-f1ed-4203-86c2-1365387408b6,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=4452b932-f1ed-4203-86c2-1365387408b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-service-lhsc2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=372e0c7c38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 identity=32090 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-service-lhsc2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=372e0c7c38 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=604 identity=32090 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-service-lhsc2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=372e0c7c38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=604 identity=32090 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-service-lhsc2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=372e0c7c38 endpointID=604 k8sNamespace=openstack k8sPodName=barbican-ks-service-lhsc2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4452b932-f1ed-4203-86c2-1365387408b6 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=4452b932-f1ed-4203-86c2-1365387408b6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=372e0c7c38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=604 identity=32090 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-service-lhsc2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 f1b212ce-e0e0-417d-9ba0-dc58babacda3 default }" containerID=611ed7ef40f0ef901bd5d81ca7ddabc52b5f9579cb90fcf465ed14e6fb95cc20 datapathConfiguration="&{false false false false false }" interface=lxca07c1ec63d8a k8sPodName=openstack/barbican-ks-endpoints-h2gxs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=611ed7ef40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h2gxs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=611ed7ef40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b18c6ce4-c6ac-4841-ae2d-2868b3f3c459,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b18c6ce4-c6ac-4841-ae2d-2868b3f3c459,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h2gxs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=611ed7ef40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h2gxs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b18c6ce4-c6ac-4841-ae2d-2868b3f3c459;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b18c6ce4-c6ac-4841-ae2d-2868b3f3c459;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=611ed7ef40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 identity=20233 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b18c6ce4-c6ac-4841-ae2d-2868b3f3c459,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b18c6ce4-c6ac-4841-ae2d-2868b3f3c459,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h2gxs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=611ed7ef40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 identity=20233 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h2gxs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=611ed7ef40 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2787 identity=20233 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h2gxs subsys=endpoint level=info msg="Successful endpoint creation" containerID=611ed7ef40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2787 identity=20233 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h2gxs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=611ed7ef40 endpointID=2787 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-h2gxs subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b18c6ce4-c6ac-4841-ae2d-2868b3f3c459 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b18c6ce4-c6ac-4841-ae2d-2868b3f3c459 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=611ed7ef40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2787 identity=20233 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h2gxs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 58c27331-88bd-49ed-ae44-15af44a0ba5d default }" containerID=a57bacafadd83a8d8babf554c1c1c01abaaba1ac1247cc3668506a6892db4140 datapathConfiguration="&{false false false false false }" interface=lxc19e4c37afb45 k8sPodName=openstack/barbican-ks-user-c8792 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a57bacafad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-user-c8792 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a57bacafad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0308af84-7f11-4b02-85e3-8aa478a46aab,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=0308af84-7f11-4b02-85e3-8aa478a46aab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-user-c8792 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a57bacafad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-user-c8792 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0308af84-7f11-4b02-85e3-8aa478a46aab;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=0308af84-7f11-4b02-85e3-8aa478a46aab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a57bacafad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 identity=18741 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0308af84-7f11-4b02-85e3-8aa478a46aab,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=0308af84-7f11-4b02-85e3-8aa478a46aab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-user-c8792 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a57bacafad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 identity=18741 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-user-c8792 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a57bacafad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1330 identity=18741 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-user-c8792 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a57bacafad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1330 identity=18741 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-user-c8792 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a57bacafad endpointID=1330 k8sNamespace=openstack k8sPodName=barbican-ks-user-c8792 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0308af84-7f11-4b02-85e3-8aa478a46aab k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=0308af84-7f11-4b02-85e3-8aa478a46aab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a57bacafad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1330 identity=18741 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-user-c8792 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.211 0d5564d2-14cb-4722-bbf3-813aed193368 default }" containerID=3505da2296e62ded8618e1a1022fa86c6b2aa41b644eed41f83c7668c84c25e9 datapathConfiguration="&{false false false false false }" interface=lxc34131ae55e34 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zrpfv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3505da2296 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2287 ipv4=10.0.0.211 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zrpfv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3505da2296 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2287 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.211 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zrpfv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3505da2296 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2287 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.211 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zrpfv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3505da2296 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2287 identity=33041 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.211 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zrpfv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3505da2296 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2287 identity=33041 ipv4=10.0.0.211 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zrpfv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3505da2296 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2287 identity=33041 ipv4=10.0.0.211 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zrpfv subsys=endpoint level=info msg="Successful endpoint creation" containerID=3505da2296 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2287 identity=33041 ipv4=10.0.0.211 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zrpfv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.195 417534f3-6bdd-4799-853f-2ec1b343ff29 default }" containerID=8e502147249e14a26cc4a1702060a386b3301de727eda05b652dfcac542326cf datapathConfiguration="&{false false false false false }" interface=lxc6a329fe5adb4 k8sPodName=openstack/rook-ceph-detect-version-hxxc9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e50214724 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hxxc9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e50214724 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=fd312d0c-d072-409f-bab3-b090450991c3,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=fd312d0c-d072-409f-bab3-b090450991c3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hxxc9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=fd312d0c-d072-409f-bab3-b090450991c3;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=fd312d0c-d072-409f-bab3-b090450991c3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e50214724 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 identity=17502 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=fd312d0c-d072-409f-bab3-b090450991c3,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=fd312d0c-d072-409f-bab3-b090450991c3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hxxc9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e50214724 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 identity=17502 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hxxc9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8e50214724 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=778 identity=17502 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hxxc9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e50214724 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=778 identity=17502 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hxxc9 subsys=daemon level=info msg="Delete endpoint request" containerID=8e50214724 endpointID=778 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-hxxc9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=fd312d0c-d072-409f-bab3-b090450991c3 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=fd312d0c-d072-409f-bab3-b090450991c3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=8e50214724 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=778 identity=17502 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hxxc9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 82ca883b-c332-4342-8614-4e9ef25ae861 default }" containerID=b6f7fad9abde421c0ddc6ab7763a1fafc0ea147a0b7d91f5ff428a0d5f7c0a20 datapathConfiguration="&{false false false false false }" interface=lxc50ec209828fa k8sPodName=openstack/ceph-object-controller-detect-version-gsk9d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6f7fad9ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3348 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gsk9d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6f7fad9ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3348 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=13b94e2a-5275-4e6d-95c9-c80fb5d886f2,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=13b94e2a-5275-4e6d-95c9-c80fb5d886f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gsk9d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=13b94e2a-5275-4e6d-95c9-c80fb5d886f2;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=13b94e2a-5275-4e6d-95c9-c80fb5d886f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6f7fad9ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3348 identity=63136 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=13b94e2a-5275-4e6d-95c9-c80fb5d886f2,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=13b94e2a-5275-4e6d-95c9-c80fb5d886f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gsk9d oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b6f7fad9ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3348 identity=63136 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gsk9d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b6f7fad9ab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3348 identity=63136 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gsk9d subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6f7fad9ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3348 identity=63136 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gsk9d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b6f7fad9ab endpointID=3348 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-gsk9d subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=13b94e2a-5275-4e6d-95c9-c80fb5d886f2 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=13b94e2a-5275-4e6d-95c9-c80fb5d886f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=b6f7fad9ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3348 identity=63136 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gsk9d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 595dc9af-939a-44d6-bfa1-0f266d2a47b3 default }" containerID=0d20915f2620763afad15c4e6ca2cb01feddf624645196598bd3c4c256cb5957 datapathConfiguration="&{false false false false false }" interface=lxc9bf85b91ac57 k8sPodName=local-path-storage/helper-pod-create-pvc-5611b619-6bc0-433e-a996-f363cbbeb6c8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d20915f26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5611b619-6bc0-433e-a996-f363cbbeb6c8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d20915f26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5611b619-6bc0-433e-a996-f363cbbeb6c8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d20915f26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 identity=16944 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5611b619-6bc0-433e-a996-f363cbbeb6c8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d20915f26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2049 identity=16944 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5611b619-6bc0-433e-a996-f363cbbeb6c8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d20915f26 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2049 identity=16944 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5611b619-6bc0-433e-a996-f363cbbeb6c8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d20915f26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2049 identity=16944 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5611b619-6bc0-433e-a996-f363cbbeb6c8 subsys=daemon level=info msg="Delete endpoint request" containerID=0d20915f26 endpointID=2049 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5611b619-6bc0-433e-a996-f363cbbeb6c8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0d20915f26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2049 identity=16944 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5611b619-6bc0-433e-a996-f363cbbeb6c8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 5238f883-e486-401f-9245-b5cce676b723 default }" containerID=1fdd00bad4b5384a38981b60cc9cd066fd72765f08f512627975b1b33fb644d9 datapathConfiguration="&{false false false false false }" interface=lxca691e9e1ba7c k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1fdd00bad4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1199 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1fdd00bad4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1199 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1fdd00bad4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1199 identity=63403 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1fdd00bad4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1199 identity=63403 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1fdd00bad4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1199 identity=63403 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1fdd00bad4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1199 identity=63403 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.22 3d3b2cb4-5fbd-4635-bf91-c3122033f758 default }" containerID=ede31438f1920f1b17a5fdf18f7672ed3dc7513aa2a5d1017f5c96c67c36e05e datapathConfiguration="&{false false false false false }" interface=lxc33f6aacadbcd k8sPodName=openstack/glance-db-init-n6r5s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ede31438f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2993 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-db-init-n6r5s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ede31438f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2993 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=af90b148-8625-465a-9a18-4a639d89d04d,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=af90b148-8625-465a-9a18-4a639d89d04d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-db-init-n6r5s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=af90b148-8625-465a-9a18-4a639d89d04d;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=af90b148-8625-465a-9a18-4a639d89d04d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ede31438f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2993 identity=20068 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=af90b148-8625-465a-9a18-4a639d89d04d,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=af90b148-8625-465a-9a18-4a639d89d04d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-db-init-n6r5s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ede31438f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2993 identity=20068 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-db-init-n6r5s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ede31438f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2993 identity=20068 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-db-init-n6r5s subsys=endpoint level=info msg="Successful endpoint creation" containerID=ede31438f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2993 identity=20068 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-db-init-n6r5s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ede31438f1 endpointID=2993 k8sNamespace=openstack k8sPodName=glance-db-init-n6r5s subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=af90b148-8625-465a-9a18-4a639d89d04d k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=af90b148-8625-465a-9a18-4a639d89d04d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ede31438f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2993 identity=20068 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-db-init-n6r5s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 bb7fdb33-f49a-4924-a3d1-77b643d7ada4 default }" containerID=bbede83e22e29eae39ea2b995075b949c83c687bf4a0ef55b14f619fa18e3286 datapathConfiguration="&{false false false false false }" interface=lxc9c5a364070ba k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lb8qn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bbede83e22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lb8qn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bbede83e22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lb8qn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bbede83e22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identity=9507 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lb8qn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bbede83e22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identity=9507 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lb8qn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.226 499e6ab8-1396-49ed-bf2d-9f1c41603f28 default }" containerID=4a76f377ad8445af7f72e07c72a33f459ac2ea9ef2684455dacfe81b827e9e52 datapathConfiguration="&{false false false false false }" interface=lxcfa87f4182354 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9ngkl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a76f377ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9ngkl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a76f377ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9ngkl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a76f377ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 identity=3527 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9ngkl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a76f377ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 identity=3527 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9ngkl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bbede83e22 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1460 identity=9507 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lb8qn subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbede83e22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1460 identity=9507 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lb8qn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4a76f377ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=214 identity=3527 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9ngkl subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a76f377ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=214 identity=3527 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9ngkl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.14 7b71d10c-2470-45ae-82e5-1fea7d4a0142 default }" containerID=9bc333d33c06af73486a6225f87b78836bc9a50209518f83bd9ae01a30b30c1f datapathConfiguration="&{false false false false false }" interface=lxcbfb48bdda2d0 k8sPodName=openstack/glance-db-sync-8q5xv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9bc333d33c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-db-sync-8q5xv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9bc333d33c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c5068731-d5fc-4788-8ea4-af95039a1bea,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=c5068731-d5fc-4788-8ea4-af95039a1bea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-db-sync-8q5xv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c5068731-d5fc-4788-8ea4-af95039a1bea;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=c5068731-d5fc-4788-8ea4-af95039a1bea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9bc333d33c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identity=11744 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c5068731-d5fc-4788-8ea4-af95039a1bea,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=c5068731-d5fc-4788-8ea4-af95039a1bea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-db-sync-8q5xv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9bc333d33c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identity=11744 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-db-sync-8q5xv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9bc333d33c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1350 identity=11744 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-db-sync-8q5xv subsys=endpoint level=info msg="Successful endpoint creation" containerID=9bc333d33c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1350 identity=11744 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-db-sync-8q5xv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9bc333d33c endpointID=1350 k8sNamespace=openstack k8sPodName=glance-db-sync-8q5xv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c5068731-d5fc-4788-8ea4-af95039a1bea k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=c5068731-d5fc-4788-8ea4-af95039a1bea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9bc333d33c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1350 identity=11744 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-db-sync-8q5xv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 47b6bad5-e5d0-4ff9-95b6-28224bcc3710 default }" containerID=a20716a864eefbf9c00d202175e9e9aae8de04a41fa2c3364fc68b39e5604faf datapathConfiguration="&{false false false false false }" interface=lxc2530d35dd01d k8sPodName=openstack/glance-rabbit-init-cp2pp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a20716a864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2697 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-rabbit-init-cp2pp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a20716a864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2697 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=381b3d33-919a-40d3-ba74-5161d19177b3,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=381b3d33-919a-40d3-ba74-5161d19177b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-rabbit-init-cp2pp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=381b3d33-919a-40d3-ba74-5161d19177b3;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=381b3d33-919a-40d3-ba74-5161d19177b3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a20716a864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2697 identity=47087 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=381b3d33-919a-40d3-ba74-5161d19177b3,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=381b3d33-919a-40d3-ba74-5161d19177b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-rabbit-init-cp2pp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a20716a864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2697 identity=47087 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-rabbit-init-cp2pp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a20716a864 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2697 identity=47087 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-rabbit-init-cp2pp subsys=endpoint level=info msg="Successful endpoint creation" containerID=a20716a864 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2697 identity=47087 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-rabbit-init-cp2pp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a20716a864 endpointID=2697 k8sNamespace=openstack k8sPodName=glance-rabbit-init-cp2pp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=381b3d33-919a-40d3-ba74-5161d19177b3 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=381b3d33-919a-40d3-ba74-5161d19177b3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a20716a864 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2697 identity=47087 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-rabbit-init-cp2pp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 47dc1041-c515-48a7-99a6-682bd53c40a2 default }" containerID=37e1e1288b81d55f758054cb50b8adb9bcdd74cc00a1d8242d5eafa075cc59cf datapathConfiguration="&{false false false false false }" interface=lxce0740c84e9c8 k8sPodName=openstack/glance-ks-service-9r6t5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37e1e1288b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1895 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-ks-service-9r6t5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37e1e1288b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1895 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=74e69ac7-10e9-45e1-9a8d-25b0a7b35635,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=74e69ac7-10e9-45e1-9a8d-25b0a7b35635,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-ks-service-9r6t5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=74e69ac7-10e9-45e1-9a8d-25b0a7b35635;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=74e69ac7-10e9-45e1-9a8d-25b0a7b35635;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37e1e1288b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1895 identity=29856 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=74e69ac7-10e9-45e1-9a8d-25b0a7b35635,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=74e69ac7-10e9-45e1-9a8d-25b0a7b35635,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-ks-service-9r6t5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37e1e1288b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1895 identity=29856 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-ks-service-9r6t5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37e1e1288b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1895 identity=29856 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-ks-service-9r6t5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=37e1e1288b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1895 identity=29856 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-ks-service-9r6t5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=37e1e1288b endpointID=1895 k8sNamespace=openstack k8sPodName=glance-ks-service-9r6t5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=74e69ac7-10e9-45e1-9a8d-25b0a7b35635 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=74e69ac7-10e9-45e1-9a8d-25b0a7b35635 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=37e1e1288b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1895 identity=29856 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-ks-service-9r6t5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 f7f278d4-79ab-4ce7-8395-c751acdc94a1 default }" containerID=f03e59c95e50ef10b7840666a3c1c895c5414b477ef5cba16492c2672400e509 datapathConfiguration="&{false false false false false }" interface=lxc0ba07fd0a5e5 k8sPodName=openstack/glance-ks-endpoints-nqjrw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f03e59c95e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-ks-endpoints-nqjrw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f03e59c95e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3ea1ee8c-5d0e-4fc7-87d6-6b9845664113,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3ea1ee8c-5d0e-4fc7-87d6-6b9845664113,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-ks-endpoints-nqjrw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f03e59c95e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-ks-endpoints-nqjrw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3ea1ee8c-5d0e-4fc7-87d6-6b9845664113;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3ea1ee8c-5d0e-4fc7-87d6-6b9845664113;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f03e59c95e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 identity=15699 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3ea1ee8c-5d0e-4fc7-87d6-6b9845664113,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3ea1ee8c-5d0e-4fc7-87d6-6b9845664113,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-ks-endpoints-nqjrw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f03e59c95e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 identity=15699 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-ks-endpoints-nqjrw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f03e59c95e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=992 identity=15699 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-ks-endpoints-nqjrw subsys=endpoint level=info msg="Successful endpoint creation" containerID=f03e59c95e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=992 identity=15699 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-ks-endpoints-nqjrw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f03e59c95e endpointID=992 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-nqjrw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3ea1ee8c-5d0e-4fc7-87d6-6b9845664113 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3ea1ee8c-5d0e-4fc7-87d6-6b9845664113 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f03e59c95e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=992 identity=15699 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-ks-endpoints-nqjrw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 a9300704-ae82-4992-b4dd-682ebc8defe4 default }" containerID=29bdd812fc858dfb261461329bad2b6d3d1de2089c73f97ef16c4538efda81d3 datapathConfiguration="&{false false false false false }" interface=lxcd31c39048083 k8sPodName=openstack/glance-ks-user-l6z4h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29bdd812fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-l6z4h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29bdd812fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8b92f373-cc67-4b94-b069-19c7cf9b671d,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=8b92f373-cc67-4b94-b069-19c7cf9b671d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-l6z4h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8b92f373-cc67-4b94-b069-19c7cf9b671d;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=8b92f373-cc67-4b94-b069-19c7cf9b671d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29bdd812fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=4450 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8b92f373-cc67-4b94-b069-19c7cf9b671d,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=8b92f373-cc67-4b94-b069-19c7cf9b671d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-l6z4h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29bdd812fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=4450 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-l6z4h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=29bdd812fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=653 identity=4450 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-l6z4h subsys=endpoint level=info msg="Successful endpoint creation" containerID=29bdd812fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=653 identity=4450 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-l6z4h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=29bdd812fc endpointID=653 k8sNamespace=openstack k8sPodName=glance-ks-user-l6z4h subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8b92f373-cc67-4b94-b069-19c7cf9b671d k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=8b92f373-cc67-4b94-b069-19c7cf9b671d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=29bdd812fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=653 identity=4450 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-user-l6z4h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 4721127f-b264-436c-ad18-0a9516d2dd1b default }" containerID=ba75fde506d1e2ff38408f63a1316067d7dc28adaf086a0ab7826e3e62bc3e51 datapathConfiguration="&{false false false false false }" interface=lxc733ac861fdd5 k8sPodName=openstack/glance-metadefs-load-xnnhq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba75fde506 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2581 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-metadefs-load-xnnhq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba75fde506 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2581 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ae49ab57-e109-4911-b65d-54f56529f518,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=ae49ab57-e109-4911-b65d-54f56529f518,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-metadefs-load-xnnhq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ae49ab57-e109-4911-b65d-54f56529f518;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=ae49ab57-e109-4911-b65d-54f56529f518;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba75fde506 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2581 identity=16878 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ae49ab57-e109-4911-b65d-54f56529f518,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=ae49ab57-e109-4911-b65d-54f56529f518,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-metadefs-load-xnnhq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba75fde506 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2581 identity=16878 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-metadefs-load-xnnhq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ba75fde506 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2581 identity=16878 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-metadefs-load-xnnhq subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba75fde506 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2581 identity=16878 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-metadefs-load-xnnhq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ba75fde506 endpointID=2581 k8sNamespace=openstack k8sPodName=glance-metadefs-load-xnnhq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ae49ab57-e109-4911-b65d-54f56529f518 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=ae49ab57-e109-4911-b65d-54f56529f518 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ba75fde506 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2581 identity=16878 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-metadefs-load-xnnhq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 eb90d252-e553-437e-a5af-486ad6902223 default }" containerID=49cb9bfbaa748098bb82b147019b6f01ac1487a372b50dbc71cddeb4d9b363e1 datapathConfiguration="&{false false false false false }" interface=lxca95ec3157d1b k8sPodName=openstack/glance-storage-init-66nmn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49cb9bfbaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-storage-init-66nmn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49cb9bfbaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f6c17925-e19e-4833-8762-513aaa85f3cc,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=f6c17925-e19e-4833-8762-513aaa85f3cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-storage-init-66nmn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f6c17925-e19e-4833-8762-513aaa85f3cc;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=f6c17925-e19e-4833-8762-513aaa85f3cc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49cb9bfbaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identity=7272 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f6c17925-e19e-4833-8762-513aaa85f3cc,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=f6c17925-e19e-4833-8762-513aaa85f3cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-storage-init-66nmn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=49cb9bfbaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identity=7272 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-storage-init-66nmn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=49cb9bfbaa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=967 identity=7272 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-storage-init-66nmn subsys=endpoint level=info msg="Successful endpoint creation" containerID=49cb9bfbaa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=967 identity=7272 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-storage-init-66nmn subsys=daemon level=info msg="Delete endpoint request" containerID=49cb9bfbaa endpointID=967 k8sNamespace=openstack k8sPodName=glance-storage-init-66nmn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f6c17925-e19e-4833-8762-513aaa85f3cc k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=f6c17925-e19e-4833-8762-513aaa85f3cc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=49cb9bfbaa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=967 identity=7272 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-storage-init-66nmn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 d2de2731-6762-476b-b48d-50ce55293e04 default }" containerID=7de65e8f4d853443503981a651fc6b2a71d4c7cd48a3ad89fb592170c09a7add datapathConfiguration="&{false false false false false }" interface=lxc22517c1d58dc k8sPodName=openstack/glance-api-6858797b68-xb79r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7de65e8f4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2898 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-api-6858797b68-xb79r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7de65e8f4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2898 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-api-6858797b68-xb79r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7de65e8f4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2898 identity=16211 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-api-6858797b68-xb79r oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7de65e8f4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2898 identity=16211 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-api-6858797b68-xb79r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7de65e8f4d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2898 identity=16211 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-api-6858797b68-xb79r subsys=endpoint level=info msg="Successful endpoint creation" containerID=7de65e8f4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2898 identity=16211 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-api-6858797b68-xb79r subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.71 d2b59b7d-3ea3-40d0-97a5-291be4f999bd default }" containerID=fb502ddcd4289b153cc3b064d7896c44bdf245830aacd6e5169f39ab3b1006ad datapathConfiguration="&{false false false false false }" interface=lxc00e749ae6218 k8sPodName=openstack/staffeln-conductor-856d9f8575-p4dff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb502ddcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/staffeln-conductor-856d9f8575-p4dff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb502ddcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/staffeln-conductor-856d9f8575-p4dff subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb502ddcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identity=22333 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/staffeln-conductor-856d9f8575-p4dff oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb502ddcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identity=22333 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/staffeln-conductor-856d9f8575-p4dff subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.134 7adb6e3a-2216-468d-a472-28d8ab800d57 default }" containerID=d63e4f18124c1777d24b9082dde168153c3c8edefd5a5abdbc6b249e5d012e86 datapathConfiguration="&{false false false false false }" interface=lxc6299a048cb55 k8sPodName=openstack/staffeln-db-init-xw6g7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d63e4f1812 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=827 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-db-init-xw6g7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d63e4f1812 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=827 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d815dbb3-894d-49f0-b041-7189a6784ef7,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=d815dbb3-894d-49f0-b041-7189a6784ef7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-db-init-xw6g7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=d815dbb3-894d-49f0-b041-7189a6784ef7;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=d815dbb3-894d-49f0-b041-7189a6784ef7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d63e4f1812 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=827 identity=54184 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d815dbb3-894d-49f0-b041-7189a6784ef7,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=d815dbb3-894d-49f0-b041-7189a6784ef7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-db-init-xw6g7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d63e4f1812 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=827 identity=54184 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-db-init-xw6g7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb502ddcd4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3388 identity=22333 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/staffeln-conductor-856d9f8575-p4dff subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb502ddcd4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3388 identity=22333 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/staffeln-conductor-856d9f8575-p4dff subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.85 37c88fdf-6c21-42d0-bf91-bde6a860529c default }" containerID=a1ae414bebb92c6c4f609fca2717fb7721ef459a50fb104ae77a71fb40e47e30 datapathConfiguration="&{false false false false false }" interface=lxc47509dbd5d46 k8sPodName=openstack/staffeln-api-576b89f6cb-czw9c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1ae414beb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-api-576b89f6cb-czw9c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1ae414beb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-api-576b89f6cb-czw9c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1ae414beb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identity=51992 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-api-576b89f6cb-czw9c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1ae414beb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identity=51992 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-api-576b89f6cb-czw9c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d63e4f1812 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=827 identity=54184 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-db-init-xw6g7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d63e4f1812 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=827 identity=54184 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-db-init-xw6g7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a1ae414beb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1316 identity=51992 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-api-576b89f6cb-czw9c subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1ae414beb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1316 identity=51992 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-api-576b89f6cb-czw9c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d63e4f1812 endpointID=827 k8sNamespace=openstack k8sPodName=staffeln-db-init-xw6g7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=d815dbb3-894d-49f0-b041-7189a6784ef7 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=d815dbb3-894d-49f0-b041-7189a6784ef7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=d63e4f1812 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=827 identity=54184 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-db-init-xw6g7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 6e9f0766-d188-49c1-8cbb-e692db2dc767 default }" containerID=037dda124d41c9651661cd0d434dc9e622b4196cc8d385b1c87d4ba04e2b7e0d datapathConfiguration="&{false false false false false }" interface=lxc73c152c072b5 k8sPodName=openstack/staffeln-db-sync-2fmxj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=037dda124d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1037 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/staffeln-db-sync-2fmxj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=037dda124d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1037 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=ea795be6-0b27-4aec-8fe4-b30dbc41c195,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=ea795be6-0b27-4aec-8fe4-b30dbc41c195,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/staffeln-db-sync-2fmxj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=ea795be6-0b27-4aec-8fe4-b30dbc41c195;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=ea795be6-0b27-4aec-8fe4-b30dbc41c195;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=037dda124d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1037 identity=9588 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=ea795be6-0b27-4aec-8fe4-b30dbc41c195,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=ea795be6-0b27-4aec-8fe4-b30dbc41c195,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/staffeln-db-sync-2fmxj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=037dda124d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1037 identity=9588 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/staffeln-db-sync-2fmxj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=037dda124d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1037 identity=9588 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/staffeln-db-sync-2fmxj subsys=endpoint level=info msg="Successful endpoint creation" containerID=037dda124d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1037 identity=9588 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/staffeln-db-sync-2fmxj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager