level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="910.237µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="50.521µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="906.237µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.52µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=93.824148ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="10.81µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="15.34µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="46.471µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="49.721µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="60.921µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="428.008µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.836353ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.07211ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="47.84µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="49.761µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="317.206µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="135.712µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="61.881µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=39.549721ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="365.698µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="10.14µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="8.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.200.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=102.651134ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="2.98µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.094145ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.08µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.141601ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="6.44µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="12.65µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.72µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.37µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration=930ns function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="33.801µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="15.16µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="38.651µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="426.018µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="8.921µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="350.707µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="916.157µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.664442ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.17µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="25.941µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.200 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.200 ipAddr.ipv6="" k8sNodeIP=162.253.55.200 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.200" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.34" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.200" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.200} {CiliumInternalIP 10.0.0.34}] 10.0.0.0/24 [] [] 10.0.0.200 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:45019" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.475493683s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="27.86µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="8.71µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="55.231µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="6.79µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2580 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2580 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2580 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.492617698s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=305.184011ms file-path=/var/run/cilium/state/templates/c9281fbdd58259d68def5f6e5e4ad117c9fb70120efcc9919af9c6dcd2a0b671/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2580 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 b93905e4-c523-41a6-84e9-6500a9128d90 default }" containerID=5e373003afcc47f72d89b5b5c27b35a06b526a3caac337c5a788825a45e1c498 datapathConfiguration="&{false false false false false }" interface=lxcab7f218aa4c1 k8sPodName=kube-system/coredns-7c96b6546b-x9mtf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e373003af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 ipv4=10.0.0.144 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-x9mtf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e373003af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.144 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-x9mtf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.107 b220cf98-ca16-438a-a592-60dd4ebd029e default }" containerID=50014bcf5bd844c68231a31d452de1a110e30e3a266c889567b4d3df84490991 datapathConfiguration="&{false false false false false }" interface=lxced306fcf37fd k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jgn2l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4080 ipv4=10.0.0.200 ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID=50014bcf5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1653 ipv4=10.0.0.107 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jgn2l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4080 identityLabels="reserved:health" ipv4=10.0.0.200 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4080 identity=4 identityLabels="reserved:health" ipv4=10.0.0.200 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50014bcf5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1653 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=11cf0ef6-a1ab-4bf3-bb6b-6dfa10dbbed2,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=11cf0ef6-a1ab-4bf3-bb6b-6dfa10dbbed2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.107 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jgn2l subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e373003af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identity=18448 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.144 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-x9mtf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e373003af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identity=18448 ipv4=10.0.0.144 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-x9mtf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=50014bcf5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1653 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.107 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jgn2l line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=11cf0ef6-a1ab-4bf3-bb6b-6dfa10dbbed2;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=11cf0ef6-a1ab-4bf3-bb6b-6dfa10dbbed2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50014bcf5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1653 identity=60489 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=11cf0ef6-a1ab-4bf3-bb6b-6dfa10dbbed2,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=11cf0ef6-a1ab-4bf3-bb6b-6dfa10dbbed2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.107 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jgn2l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50014bcf5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1653 identity=60489 ipv4=10.0.0.107 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jgn2l subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.138790457s file-path=/var/run/cilium/state/templates/c1b0e2c77890c24ef4fcc6b862ad3f3b4533457d4ecf42735f4d9be4bfc010ca/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=5e373003af datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=419 identity=18448 ipv4=10.0.0.144 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-x9mtf subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e373003af datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=419 identity=18448 ipv4=10.0.0.144 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-x9mtf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=50014bcf5b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1653 identity=60489 ipv4=10.0.0.107 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jgn2l subsys=endpoint level=info msg="Successful endpoint creation" containerID=50014bcf5b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1653 identity=60489 ipv4=10.0.0.107 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jgn2l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4080 identity=4 ipv4=10.0.0.200 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=50014bcf5b endpointID=1653 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-jgn2l subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=11cf0ef6-a1ab-4bf3-bb6b-6dfa10dbbed2 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=11cf0ef6-a1ab-4bf3-bb6b-6dfa10dbbed2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=50014bcf5b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1653 identity=60489 ipv4=10.0.0.107 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jgn2l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 65f80afb-60db-45ad-b2b1-52164f25bbff default }" containerID=0eca27243b95226d77c596791c9138b1fb62b45217ea9780ef8270cdb821a4c6 datapathConfiguration="&{false false false false false }" interface=lxc0a0652eab2c1 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wqcm9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0eca27243b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wqcm9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0eca27243b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wqcm9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0eca27243b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wqcm9 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0eca27243b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 identity=35814 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wqcm9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0eca27243b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 identity=35814 ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wqcm9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0eca27243b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1017 identity=35814 ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wqcm9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0eca27243b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1017 identity=35814 ipv4=10.0.0.245 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wqcm9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2580 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02580 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02580 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02580 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02580:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2580 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 b9378c46-b6df-406e-8ee3-c71e482171e4 default }" containerID=d1d369cccc8933e35ed91a8ab7e37b72cac2fab5f014e373ab92e2475a592a30 datapathConfiguration="&{false false false false false }" interface=lxcf1f8bfc1113d k8sPodName=kube-system/coredns-67659f764b-dtpzm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1d369cccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3214 ipv4=10.0.0.173 ipv6= k8sPodName=kube-system/coredns-67659f764b-dtpzm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1d369cccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3214 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.173 ipv6= k8sPodName=kube-system/coredns-67659f764b-dtpzm subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d1d369cccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3214 identity=18448 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.173 ipv6= k8sPodName=kube-system/coredns-67659f764b-dtpzm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1d369cccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3214 identity=18448 ipv4=10.0.0.173 ipv6= k8sPodName=kube-system/coredns-67659f764b-dtpzm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 ba8f309d-9727-42ca-b6a9-9edbf2d40c76 default }" containerID=b6aaf4a688502e182c2338efb4a87aa98fd28f5f4be9079532df73deb0e29aa7 datapathConfiguration="&{false false false false false }" interface=lxc8e88f71e7fd1 k8sPodName=kube-system/coredns-67659f764b-2mgvq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6aaf4a688 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1773 ipv4=10.0.0.79 ipv6= k8sPodName=kube-system/coredns-67659f764b-2mgvq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6aaf4a688 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1773 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.79 ipv6= k8sPodName=kube-system/coredns-67659f764b-2mgvq subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b6aaf4a688 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1773 identity=18448 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.79 ipv6= k8sPodName=kube-system/coredns-67659f764b-2mgvq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b6aaf4a688 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1773 identity=18448 ipv4=10.0.0.79 ipv6= k8sPodName=kube-system/coredns-67659f764b-2mgvq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1d369cccc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3214 identity=18448 ipv4=10.0.0.173 ipv6= k8sPodName=kube-system/coredns-67659f764b-dtpzm subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1d369cccc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3214 identity=18448 ipv4=10.0.0.173 ipv6= k8sPodName=kube-system/coredns-67659f764b-dtpzm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b6aaf4a688 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1773 identity=18448 ipv4=10.0.0.79 ipv6= k8sPodName=kube-system/coredns-67659f764b-2mgvq subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6aaf4a688 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1773 identity=18448 ipv4=10.0.0.79 ipv6= k8sPodName=kube-system/coredns-67659f764b-2mgvq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.115 a4914719-e135-4467-8a39-465beb43b79b default }" containerID=f4d3ac34e5e822acb37a12dddbf7ddfc5dd3d5a0c4b32927aa0e12c8306e582c datapathConfiguration="&{false false false false false }" interface=lxc2507c9a1e781 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nwb88 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4d3ac34e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1862 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nwb88 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4d3ac34e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1862 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nwb88 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4d3ac34e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1862 identity=7843 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nwb88 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4d3ac34e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1862 identity=7843 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nwb88 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f4d3ac34e5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1862 identity=7843 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nwb88 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4d3ac34e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1862 identity=7843 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nwb88 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5e373003af endpointID=419 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-x9mtf subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=5e373003af datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=419 identity=18448 ipv4=10.0.0.144 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-x9mtf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 58f1ed46-885f-4c70-a750-9d67c264f5c1 default }" containerID=24313e340317013ec36e882e01413791fe9f846becd55f832d7fd3984bc426a5 datapathConfiguration="&{false false false false false }" interface=lxca9e809de4812 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7hqkx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24313e3403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1286 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7hqkx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24313e3403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1286 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7hqkx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=24313e3403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1286 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7hqkx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24313e3403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1286 identity=20802 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7hqkx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24313e3403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1286 identity=20802 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7hqkx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 9b953c1f-ea62-4c7c-ae0b-8624b0e59522 default }" containerID=2c9e7158becdaf9a11a01cdf6c15c2f4be4832a1644074476f78c75a73acea50 datapathConfiguration="&{false false false false false }" interface=lxc717160fdef22 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tr9pg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c9e7158be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3663 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tr9pg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c9e7158be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3663 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tr9pg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.153 611a546a-f035-4116-9424-031276a46a2e default }" containerID=f6c76f22d5ba14f82a210321ca67a0940f918822271adc5a0cc571a6f4c3a0a7 datapathConfiguration="&{false false false false false }" interface=lxc093b1bd01073 k8sPodName=cert-manager/cert-manager-75c4c745bc-d5prm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6c76f22d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-d5prm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6c76f22d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-d5prm subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c9e7158be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3663 identity=58253 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tr9pg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c9e7158be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3663 identity=58253 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tr9pg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6c76f22d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=21793 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-d5prm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6c76f22d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=21793 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-d5prm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=24313e3403 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1286 identity=20802 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7hqkx subsys=endpoint level=info msg="Successful endpoint creation" containerID=24313e3403 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1286 identity=20802 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-7hqkx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2c9e7158be datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3663 identity=58253 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tr9pg subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c9e7158be datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3663 identity=58253 ipv4=10.0.0.94 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tr9pg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f6c76f22d5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=662 identity=21793 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-d5prm subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6c76f22d5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=662 identity=21793 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-d5prm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.48 d6df3df8-6f5f-49b7-9b86-8653a19a155c default }" containerID=87eb8a16227bf4fa95579f15112c255757ddbf6f168e06a1c3c7019ee63edacb datapathConfiguration="&{false false false false false }" interface=lxc2d2d405a4f88 k8sPodName=cert-manager/cert-manager-startupapicheck-k2qgk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87eb8a1622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1467 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-k2qgk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87eb8a1622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1467 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=d40b5082-5afa-49e9-a0ef-8c4a525abc97,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=d40b5082-5afa-49e9-a0ef-8c4a525abc97,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-k2qgk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=d40b5082-5afa-49e9-a0ef-8c4a525abc97;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=d40b5082-5afa-49e9-a0ef-8c4a525abc97;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87eb8a1622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1467 identity=18489 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=d40b5082-5afa-49e9-a0ef-8c4a525abc97,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=d40b5082-5afa-49e9-a0ef-8c4a525abc97,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-k2qgk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87eb8a1622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1467 identity=18489 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-k2qgk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=87eb8a1622 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1467 identity=18489 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-k2qgk subsys=endpoint level=info msg="Successful endpoint creation" containerID=87eb8a1622 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1467 identity=18489 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-k2qgk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=87eb8a1622 endpointID=1467 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-k2qgk subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=d40b5082-5afa-49e9-a0ef-8c4a525abc97 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=d40b5082-5afa-49e9-a0ef-8c4a525abc97 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=87eb8a1622 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1467 identity=18489 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-k2qgk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 07aa3bd1-1ba8-41fc-9175-3974c730ccf6 default }" containerID=6719d803df4ad590cae36e576c84ae6f89a00abccab369ab73f2eb5b9e2d1a2f datapathConfiguration="&{false false false false false }" interface=lxc6029e71434f3 k8sPodName=ingress-nginx/ingress-nginx-admission-create-cgrfs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6719d803df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-cgrfs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6719d803df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=9b7342fe-3a9d-4ea7-bd25-56ff6e07ae4f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=9b7342fe-3a9d-4ea7-bd25-56ff6e07ae4f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-cgrfs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=9b7342fe-3a9d-4ea7-bd25-56ff6e07ae4f;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=9b7342fe-3a9d-4ea7-bd25-56ff6e07ae4f;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6719d803df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-cgrfs line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6719d803df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 identity=31767 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=9b7342fe-3a9d-4ea7-bd25-56ff6e07ae4f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=9b7342fe-3a9d-4ea7-bd25-56ff6e07ae4f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-cgrfs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6719d803df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 identity=31767 ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-cgrfs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6719d803df datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1756 identity=31767 ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-cgrfs subsys=endpoint level=info msg="Successful endpoint creation" containerID=6719d803df datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1756 identity=31767 ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-cgrfs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6719d803df endpointID=1756 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-cgrfs subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=9b7342fe-3a9d-4ea7-bd25-56ff6e07ae4f k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=9b7342fe-3a9d-4ea7-bd25-56ff6e07ae4f k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=6719d803df datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1756 identity=31767 ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-cgrfs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 774a8ec9-bbe0-4036-89b8-93fd75f8c4b9 default }" containerID=f0d1cbaa1cd9955b87e1bc6013cdeb96d269eb884d702e52f8794f2dd9a9896e datapathConfiguration="&{false false false false false }" interface=lxc99cefbeafe24 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lhttn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0d1cbaa1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3998 ipv4=10.0.0.201 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lhttn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0d1cbaa1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3998 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.201 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lhttn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0d1cbaa1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3998 identity=20596 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.201 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lhttn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f0d1cbaa1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3998 identity=20596 ipv4=10.0.0.201 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lhttn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f0d1cbaa1c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3998 identity=20596 ipv4=10.0.0.201 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lhttn subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0d1cbaa1c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3998 identity=20596 ipv4=10.0.0.201 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lhttn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.72 bba08e73-8618-4048-9e00-5e8318fea33b default }" containerID=f6b650d7e22692d3a133fd90d2ff9dcdb97dfab89054a4d4676d7d853e43e394 datapathConfiguration="&{false false false false false }" interface=lxc5f4a10eacd51 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9bprs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6b650d7e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 ipv4=10.0.0.72 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9bprs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6b650d7e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e3ae48f0-ce47-40ea-82c3-adc8ef2f18fd,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=e3ae48f0-ce47-40ea-82c3-adc8ef2f18fd,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.72 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9bprs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=e3ae48f0-ce47-40ea-82c3-adc8ef2f18fd;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=e3ae48f0-ce47-40ea-82c3-adc8ef2f18fd;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6b650d7e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 identity=31946 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e3ae48f0-ce47-40ea-82c3-adc8ef2f18fd,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=e3ae48f0-ce47-40ea-82c3-adc8ef2f18fd,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.72 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9bprs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6b650d7e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 identity=31946 ipv4=10.0.0.72 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9bprs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f6b650d7e2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2904 identity=31946 ipv4=10.0.0.72 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9bprs subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6b650d7e2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2904 identity=31946 ipv4=10.0.0.72 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9bprs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f6b650d7e2 endpointID=2904 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-9bprs subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=e3ae48f0-ce47-40ea-82c3-adc8ef2f18fd k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=e3ae48f0-ce47-40ea-82c3-adc8ef2f18fd k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=f6b650d7e2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2904 identity=31946 ipv4=10.0.0.72 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9bprs subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=8d87f7e6-15f1-4b41-b0fb-bad675a5f73a] Description:}]" policyAddRequest=a4da8767-c2c2-4bbf-a04c-8a390620e229 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=a4da8767-c2c2-4bbf-a04c-8a390620e229 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=05409fed-c044-4c36-b304-6e1c35add47d] Description:}]" policyAddRequest=4bef4b6b-cd5f-4f8e-9d3b-957b02a53e78 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=4bef4b6b-cd5f-4f8e-9d3b-957b02a53e78 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.218 c4aba5f8-bea6-45bc-8933-57c2385e3386 default }" containerID=c9f5a44e402a3895eca313ce2571f606bc4b43e8bbb22253b6f3c09be355d4f5 datapathConfiguration="&{false false false false false }" interface=lxcf40cb5b73181 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-gld2d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9f5a44e40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2956 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-gld2d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9f5a44e40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2956 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-gld2d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9f5a44e40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2956 identity=11923 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-gld2d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9f5a44e40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2956 identity=11923 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-gld2d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c9f5a44e40 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2956 identity=11923 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-gld2d subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9f5a44e40 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2956 identity=11923 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-gld2d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.98 28082e3c-5ce4-4624-aea5-4cc7f3b4056a default }" containerID=963788a00e5fd7c2affe3afa64ffba6cc309978d7606021367d907fb4e33e5a0 datapathConfiguration="&{false false false false false }" interface=lxc291778cfc3ec k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-f5fjq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=963788a00e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1020 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-f5fjq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=963788a00e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1020 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-f5fjq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=963788a00e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1020 identity=34878 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-f5fjq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=963788a00e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1020 identity=34878 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-f5fjq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=963788a00e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1020 identity=34878 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-f5fjq subsys=endpoint level=info msg="Successful endpoint creation" containerID=963788a00e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1020 identity=34878 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-f5fjq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.186 cecbc06f-4db8-41b8-b39a-b9461dc0f463 default }" containerID=d471a158d6bfae3e78924c6d0ae112c0293e2c7a222abbed589f7a846a44e6c3 datapathConfiguration="&{false false false false false }" interface=lxcd5c6d7dcd80e k8sPodName=openstack/pxc-operator-69cb5bbdb9-5zkbn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d471a158d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3453 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-5zkbn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d471a158d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3453 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-5zkbn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d471a158d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3453 identity=13457 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-5zkbn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d471a158d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3453 identity=13457 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-5zkbn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d471a158d6 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3453 identity=13457 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-5zkbn subsys=endpoint level=info msg="Successful endpoint creation" containerID=d471a158d6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3453 identity=13457 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-5zkbn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.43 f547b27e-4b65-4272-adb3-61125b5766ff default }" containerID=0b273be962bf0a24434c8d99bc76f4172c5039ed297623510d7712ebd42ed9cc datapathConfiguration="&{false false false false false }" interface=lxcd5c0627cd8f6 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b273be962 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b273be962 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0b273be962 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.43 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b273be962 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identity=54611 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b273be962 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identity=54611 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b273be962 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=818 identity=54611 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b273be962 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=818 identity=54611 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.162 6698ce5b-79b5-43ad-93f2-762082d1e33d default }" containerID=f66c523bbb41c8dc5273d09ffb2198a56dbab77d5d2cc221937e41ba7c478964 datapathConfiguration="&{false false false false false }" interface=lxc4536e56882fa k8sPodName=local-path-storage/helper-pod-create-pvc-a2fe33e1-631c-44f3-88d1-af337c597206 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f66c523bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2fe33e1-631c-44f3-88d1-af337c597206 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f66c523bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2fe33e1-631c-44f3-88d1-af337c597206 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f66c523bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 identity=7786 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2fe33e1-631c-44f3-88d1-af337c597206 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f66c523bbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 identity=7786 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2fe33e1-631c-44f3-88d1-af337c597206 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f66c523bbb datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=752 identity=7786 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2fe33e1-631c-44f3-88d1-af337c597206 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f66c523bbb datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=752 identity=7786 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2fe33e1-631c-44f3-88d1-af337c597206 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f66c523bbb endpointID=752 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a2fe33e1-631c-44f3-88d1-af337c597206 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f66c523bbb datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=752 identity=7786 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2fe33e1-631c-44f3-88d1-af337c597206 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 6012243b-de53-4118-b968-bcd146502bec default }" containerID=75fed3243efff56bbef67f4ce5e2847e3552a17881a3b8cfe2914a01a6fb39db datapathConfiguration="&{false false false false false }" interface=lxc9e931c862b8d k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75fed3243e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75fed3243e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=75fed3243e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.237 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75fed3243e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identity=11786 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75fed3243e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identity=11786 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=75fed3243e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1623 identity=11786 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=75fed3243e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1623 identity=11786 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=3573fe7f-0daf-4cbb-9be0-b6a16abea4d3] Description:}]" policyAddRequest=150c5c8a-73ff-42db-ba73-77fd5246ef89 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=150c5c8a-73ff-42db-ba73-77fd5246ef89 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.122 cf0e6e73-4522-4d2c-9381-73733da90f90 default }" containerID=69ed7752bc4e9fd71d0cc3a0d7d60ea238373a6cbba7b76307bc9288d521955a datapathConfiguration="&{false false false false false }" interface=lxc209b587b1502 k8sPodName=local-path-storage/helper-pod-create-pvc-b86edd6c-9526-41c8-8de9-7db713687afb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69ed7752bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b86edd6c-9526-41c8-8de9-7db713687afb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69ed7752bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b86edd6c-9526-41c8-8de9-7db713687afb subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69ed7752bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 identity=7786 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b86edd6c-9526-41c8-8de9-7db713687afb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69ed7752bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1162 identity=7786 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b86edd6c-9526-41c8-8de9-7db713687afb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=69ed7752bc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1162 identity=7786 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b86edd6c-9526-41c8-8de9-7db713687afb subsys=endpoint level=info msg="Successful endpoint creation" containerID=69ed7752bc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1162 identity=7786 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b86edd6c-9526-41c8-8de9-7db713687afb subsys=daemon level=info msg="Delete endpoint request" containerID=69ed7752bc endpointID=1162 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b86edd6c-9526-41c8-8de9-7db713687afb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=69ed7752bc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1162 identity=7786 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b86edd6c-9526-41c8-8de9-7db713687afb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 6e7f54ec-3b2c-4937-b846-404efd8e224f default }" containerID=3e4a16fa35d5da13d90aa0220f740a3c0cb8e6dc8954cc60d891fd804a4700ca datapathConfiguration="&{false false false false false }" interface=lxc52bbb7c1aeed k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e4a16fa35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e4a16fa35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e4a16fa35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 identity=50160 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e4a16fa35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 identity=50160 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3e4a16fa35 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2567 identity=50160 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e4a16fa35 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2567 identity=50160 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=6ca6b576-7ca7-4c46-9513-cb5df5b20f97] Description:}]" policyAddRequest=c508f3e9-6ec1-4d6b-ac22-340308d5fdc4 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c508f3e9-6ec1-4d6b-ac22-340308d5fdc4 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.99 f47419b6-9e92-4605-b536-06d6731cf528 default }" containerID=de420b8c388ddf6531c454bb1312cac0f38bcfac67f0107d2d84ce855e530211 datapathConfiguration="&{false false false false false }" interface=lxcac54f8954778 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de420b8c38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1895 ipv4=10.0.0.99 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de420b8c38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1895 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.99 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de420b8c38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1895 identity=28437 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.99 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=de420b8c38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1895 identity=28437 ipv4=10.0.0.99 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de420b8c38 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1895 identity=28437 ipv4=10.0.0.99 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=de420b8c38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1895 identity=28437 ipv4=10.0.0.99 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009725810596940224 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.208 fccaffae-f344-48c3-868a-eb34cd7d252b default }" containerID=d9b31522705db560e8df2be8251c523f48dd0ca7f35dfd6cfae1385d84951478 datapathConfiguration="&{false false false false false }" interface=lxc603d9e6edf2c k8sPodName=monitoring/node-feature-discovery-worker-249vx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9b3152270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-249vx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9b3152270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-249vx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9b3152270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identity=39929 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-249vx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9b3152270 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identity=39929 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-249vx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 6c31952d-b7c6-462c-bf90-32cd26a236a7 default }" containerID=adb407c37098e415f4682680d50763f16d71d428ba695c8971f50a0c1cb9cc84 datapathConfiguration="&{false false false false false }" interface=lxc49df126980dd k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nbxhl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=adb407c370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nbxhl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=adb407c370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nbxhl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=adb407c370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identity=43319 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nbxhl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=adb407c370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identity=43319 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nbxhl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d9b3152270 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1549 identity=39929 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-249vx subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9b3152270 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1549 identity=39929 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-249vx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.77 f29b45fc-e3d8-43c8-b1e8-c1d2f998e1a0 default }" containerID=be35d2473d2f3e974ff9218ccd26be8f1958ad1ede3ba67e0ae338e871594f22 datapathConfiguration="&{false false false false false }" interface=lxc51e80d417f97 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-nf8kl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be35d2473d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3905 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-nf8kl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be35d2473d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3905 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-nf8kl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be35d2473d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3905 identity=14804 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-nf8kl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be35d2473d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3905 identity=14804 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-nf8kl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=adb407c370 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=283 identity=43319 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nbxhl subsys=endpoint level=info msg="Successful endpoint creation" containerID=adb407c370 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=283 identity=43319 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nbxhl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=be35d2473d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3905 identity=14804 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-nf8kl subsys=endpoint level=info msg="Successful endpoint creation" containerID=be35d2473d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3905 identity=14804 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-nf8kl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.87 7c08570d-347e-48f8-9601-e3d4b59809f1 default }" containerID=719bf90061a46d9cecbe1b7e1a07a96a1232aa8b242cb40c6ba8f028027f4764 datapathConfiguration="&{false false false false false }" interface=lxc7f5737c6791c k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xnczn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=719bf90061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 ipv4=10.0.0.87 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xnczn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=719bf90061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.87 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xnczn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=719bf90061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=16798 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.87 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xnczn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=719bf90061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=16798 ipv4=10.0.0.87 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xnczn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=719bf90061 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=660 identity=16798 ipv4=10.0.0.87 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xnczn subsys=endpoint level=info msg="Successful endpoint creation" containerID=719bf90061 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=660 identity=16798 ipv4=10.0.0.87 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xnczn subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2580 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02580 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02580 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02580 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02580:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2580 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 459b226c-843b-4999-8fa3-a3986c823ee1 default }" containerID=429effe726d3f34d44f9982535b8c575109df02f81ebd9c4be5dd59e18744200 datapathConfiguration="&{false false false false false }" interface=lxc732d7bde7029 k8sPodName=monitoring/kube-prometheus-stack-admission-create-6rt59 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=429effe726 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6rt59 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=429effe726 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=69f7246d-668d-42aa-bcfb-8b675e709c3b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=69f7246d-668d-42aa-bcfb-8b675e709c3b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6rt59 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=69f7246d-668d-42aa-bcfb-8b675e709c3b;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=69f7246d-668d-42aa-bcfb-8b675e709c3b;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=429effe726 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=10860 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=69f7246d-668d-42aa-bcfb-8b675e709c3b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=69f7246d-668d-42aa-bcfb-8b675e709c3b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6rt59 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=429effe726 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=10860 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6rt59 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=429effe726 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=279 identity=10860 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6rt59 subsys=endpoint level=info msg="Successful endpoint creation" containerID=429effe726 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=279 identity=10860 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6rt59 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=429effe726 endpointID=279 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-6rt59 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=69f7246d-668d-42aa-bcfb-8b675e709c3b k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=69f7246d-668d-42aa-bcfb-8b675e709c3b k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=429effe726 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=279 identity=10860 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6rt59 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 1e709000-1b93-478e-98d4-d9bd57b1ea0d default }" containerID=1df4af9ed916756fea88c107a102d3b5eb15b0a207b3c1d72d65ef1f79cd925a datapathConfiguration="&{false false false false false }" interface=lxcce311bd27117 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pvcfq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1df4af9ed9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pvcfq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1df4af9ed9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pvcfq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1df4af9ed9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 identity=4054 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pvcfq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1df4af9ed9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 identity=4054 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pvcfq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.148 94da4b50-8954-45c3-b7d0-95ae4f9cf238 default }" containerID=e47eafd4c68e04dcce3cb4fb43a91a72e2051331505202c5362cd6f88bb13596 datapathConfiguration="&{false false false false false }" interface=lxc34103926b00a k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-8z2hd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e47eafd4c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2677 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-8z2hd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e47eafd4c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2677 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-8z2hd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e47eafd4c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2677 identity=62348 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-8z2hd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e47eafd4c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2677 identity=62348 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-8z2hd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1df4af9ed9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=515 identity=4054 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pvcfq subsys=endpoint level=info msg="Successful endpoint creation" containerID=1df4af9ed9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=515 identity=4054 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pvcfq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.104 08e48bbb-dc39-42c3-9a49-39a23dd26b7b default }" containerID=6c75be48f3ecfb8c42abdb6c2856dccf885c4db646568a865bea681276fdc4e4 datapathConfiguration="&{false false false false false }" interface=lxc688fece6eeaf k8sPodName=monitoring/kube-prometheus-stack-grafana-7785ffbd95-clgj2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c75be48f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7785ffbd95-clgj2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c75be48f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7785ffbd95-clgj2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c75be48f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 identity=19502 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7785ffbd95-clgj2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c75be48f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1870 identity=19502 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7785ffbd95-clgj2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e47eafd4c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2677 identity=62348 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-8z2hd subsys=endpoint level=info msg="Successful endpoint creation" containerID=e47eafd4c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2677 identity=62348 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-8z2hd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6c75be48f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1870 identity=19502 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7785ffbd95-clgj2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c75be48f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1870 identity=19502 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7785ffbd95-clgj2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.67 ae201bc6-8720-4bf3-a8e2-e643de08af35 default }" containerID=6ccd98128c31b5761d098d62fafc159dc8e270648df3d23439136f1f761d6bc2 datapathConfiguration="&{false false false false false }" interface=lxc7af3c0e949f0 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hsflb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ccd98128c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hsflb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ccd98128c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=6fcb70e3-fe44-445d-998a-d1fd54167358,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=6fcb70e3-fe44-445d-998a-d1fd54167358,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hsflb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=6fcb70e3-fe44-445d-998a-d1fd54167358;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=6fcb70e3-fe44-445d-998a-d1fd54167358;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ccd98128c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 identity=53794 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=6fcb70e3-fe44-445d-998a-d1fd54167358,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=6fcb70e3-fe44-445d-998a-d1fd54167358,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hsflb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ccd98128c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 identity=53794 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hsflb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ccd98128c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2996 identity=53794 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hsflb subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ccd98128c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2996 identity=53794 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hsflb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.78 6f05069b-89a6-474d-b803-c34bb3a9efc6 default }" containerID=57f8fe785f968064740c82c803a1823a315b5b38256961ecf86dedc33c07dec3 datapathConfiguration="&{false false false false false }" interface=lxc15aaa1aad870 k8sPodName=local-path-storage/helper-pod-create-pvc-d6f86e6b-444e-4503-bec8-ab553bcfa5a0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57f8fe785f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6f86e6b-444e-4503-bec8-ab553bcfa5a0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57f8fe785f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6f86e6b-444e-4503-bec8-ab553bcfa5a0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57f8fe785f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identity=7786 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6f86e6b-444e-4503-bec8-ab553bcfa5a0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57f8fe785f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identity=7786 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6f86e6b-444e-4503-bec8-ab553bcfa5a0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57f8fe785f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=141 identity=7786 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6f86e6b-444e-4503-bec8-ab553bcfa5a0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=57f8fe785f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=141 identity=7786 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6f86e6b-444e-4503-bec8-ab553bcfa5a0 subsys=daemon level=info msg="Delete endpoint request" containerID=6ccd98128c endpointID=2996 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-hsflb subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=6fcb70e3-fe44-445d-998a-d1fd54167358 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=6fcb70e3-fe44-445d-998a-d1fd54167358 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=6ccd98128c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2996 identity=53794 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hsflb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 30826ead-dd87-4af8-85ab-3b8fa50c7684 default }" containerID=6313654dc9b1e1cd2a096d53a58da5c7afb09bd4184f832301789020a2b335d0 datapathConfiguration="&{false false false false false }" interface=lxc9811487604fc k8sPodName=local-path-storage/helper-pod-create-pvc-06676791-6354-4abf-b187-6189b4713342 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6313654dc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06676791-6354-4abf-b187-6189b4713342 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6313654dc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06676791-6354-4abf-b187-6189b4713342 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6313654dc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 identity=7786 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06676791-6354-4abf-b187-6189b4713342 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6313654dc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 identity=7786 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06676791-6354-4abf-b187-6189b4713342 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6313654dc9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2133 identity=7786 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06676791-6354-4abf-b187-6189b4713342 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6313654dc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2133 identity=7786 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06676791-6354-4abf-b187-6189b4713342 subsys=daemon level=info msg="Delete endpoint request" containerID=57f8fe785f endpointID=141 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d6f86e6b-444e-4503-bec8-ab553bcfa5a0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=57f8fe785f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=141 identity=7786 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6f86e6b-444e-4503-bec8-ab553bcfa5a0 subsys=endpoint level=info msg="Delete endpoint request" containerID=6313654dc9 endpointID=2133 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-06676791-6354-4abf-b187-6189b4713342 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6313654dc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2133 identity=7786 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06676791-6354-4abf-b187-6189b4713342 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 8edb1164-4f3d-4971-9e75-4aa5424fb3b5 default }" containerID=d2e8a637278f79b7df9f5785816e255b7cfd1db83d02b0d722109aec20b970ab datapathConfiguration="&{false false false false false }" interface=lxc4de872551ac7 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2e8a63727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2e8a63727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2e8a63727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identity=12806 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d2e8a63727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identity=12806 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2e8a63727 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=320 identity=12806 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2e8a63727 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=320 identity=12806 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.57 aad056f2-5939-448f-8376-1e868e57fa1a default }" containerID=2d8843c0be31e61b8a49ff4c9f3956d4c357e1b2ba686ea16f68a0e3807c77fe datapathConfiguration="&{false false false false false }" interface=lxc9a013978d2ac k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d8843c0be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d8843c0be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d8843c0be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identity=7095 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d8843c0be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identity=7095 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d8843c0be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1071 identity=7095 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d8843c0be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1071 identity=7095 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.199 71aadd93-54fd-4ea0-8f89-5b9c8c8440ed default }" containerID=0660531f065c8f6fb660e898c51545a77e9ce925c73b73e211941a10208f003f datapathConfiguration="&{false false false false false }" interface=lxcb2ca6638a7df k8sPodName=monitoring/loki-gateway-cf54cb88c-f2k2m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0660531f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3709 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-f2k2m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0660531f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3709 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-f2k2m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0660531f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3709 identity=22081 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-f2k2m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0660531f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3709 identity=22081 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-f2k2m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.167 3b2a2f20-6f20-454b-9f65-7624a6b7d509 default }" containerID=9f048d931e11b5e3cbf18acc1cad3b0146484c6260bd6db3c704fa5a4c0d2b9e datapathConfiguration="&{false false false false false }" interface=lxc2d2193165a02 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f048d931e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f048d931e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.240 c28f4719-8542-4b9f-8175-0b9eb0c1e06a default }" containerID=eddde47cb91caa4d20afee7303b35f6bd5cbc3af863816c90847e18069fec9a4 datapathConfiguration="&{false false false false false }" interface=lxc5a3bbaeca9d8 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eddde47cb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2293 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eddde47cb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2293 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=9f048d931e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 identity=17091 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f048d931e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 identity=17091 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eddde47cb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2293 identity=4741 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eddde47cb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2293 identity=4741 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0660531f06 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3709 identity=22081 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-f2k2m subsys=endpoint level=info msg="Successful endpoint creation" containerID=0660531f06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3709 identity=22081 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-f2k2m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=eddde47cb9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2293 identity=4741 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eddde47cb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2293 identity=4741 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9f048d931e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=756 identity=17091 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f048d931e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=756 identity=17091 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.178 eede170f-764d-4b97-9778-a17196cd1788 default }" containerID=4ab8d3e622381895673ab958fd46b04d8e28703bb8a7abb257ac8feb6e1c279f datapathConfiguration="&{false false false false false }" interface=lxc966a1f092caf k8sPodName=local-path-storage/helper-pod-create-pvc-3ccf4b4b-5bef-4478-8174-516b830d3337 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ab8d3e622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3993 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ccf4b4b-5bef-4478-8174-516b830d3337 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ab8d3e622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3993 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ccf4b4b-5bef-4478-8174-516b830d3337 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ab8d3e622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3993 identity=7786 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ccf4b4b-5bef-4478-8174-516b830d3337 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ab8d3e622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3993 identity=7786 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ccf4b4b-5bef-4478-8174-516b830d3337 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4ab8d3e622 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3993 identity=7786 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ccf4b4b-5bef-4478-8174-516b830d3337 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ab8d3e622 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3993 identity=7786 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ccf4b4b-5bef-4478-8174-516b830d3337 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.4 3f04d125-066c-4715-88d9-0984d8d111ea default }" containerID=c8e190f5a446c5cc75c03f826345dbf1685e958b8bd23ee7fbf2fc402d4ecdab datapathConfiguration="&{false false false false false }" interface=lxce6bcbb032cd5 k8sPodName=monitoring/vector-8zrtx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8e190f5a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/vector-8zrtx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8e190f5a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/vector-8zrtx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8e190f5a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=7538 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/vector-8zrtx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8e190f5a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=7538 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/vector-8zrtx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8e190f5a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1535 identity=7538 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/vector-8zrtx subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8e190f5a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1535 identity=7538 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/vector-8zrtx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4ab8d3e622 endpointID=3993 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3ccf4b4b-5bef-4478-8174-516b830d3337 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4ab8d3e622 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3993 identity=7786 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ccf4b4b-5bef-4478-8174-516b830d3337 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 2fa80e15-2963-467f-8626-08aec5e9ce3c default }" containerID=3b7ddca7d499621abdc34af6551181530c3dceb0825df3f8efd9eefbece233cf datapathConfiguration="&{false false false false false }" interface=lxc438f2e71cd7a k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bbn9w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b7ddca7d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1881 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bbn9w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b7ddca7d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1881 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bbn9w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b7ddca7d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1881 identity=45170 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bbn9w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b7ddca7d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1881 identity=45170 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bbn9w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b7ddca7d4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1881 identity=45170 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bbn9w subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b7ddca7d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1881 identity=45170 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bbn9w subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.232 259f9719-1678-46ab-9c6d-5b99d0663a49 default }" containerID=656f39d6a03645c4f92b75ebd3e719803690488afa3edb1d73d3616d3ca97d6c datapathConfiguration="&{false false false false false }" interface=lxc1f60089c40c2 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=656f39d6a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=656f39d6a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=656f39d6a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identity=21992 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=656f39d6a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identity=21992 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=656f39d6a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=573 identity=21992 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=656f39d6a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=573 identity=21992 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.59 d055fc6f-ed80-455c-a71d-ef6ccc6e4acb default }" containerID=123d436f85ab312e3102648d04f6e339b4749adafb10a9c275578b7c1c0a8b30 datapathConfiguration="&{false false false false false }" interface=lxc6e98a2b1ff4e k8sPodName=openstack/memcached-memcached-6479589586-v7dmn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=123d436f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-v7dmn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=123d436f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-v7dmn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=123d436f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identity=17701 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-v7dmn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=123d436f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identity=17701 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-v7dmn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=123d436f85 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1085 identity=17701 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-v7dmn subsys=endpoint level=info msg="Successful endpoint creation" containerID=123d436f85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1085 identity=17701 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-v7dmn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.139 7e6c67b7-fcf2-461f-a0ed-b3acea6ce976 default }" containerID=b84bc726b631bd1a2e3587638eba2a215bd498e1190227e3721795e861dfd315 datapathConfiguration="&{false false false false false }" interface=lxc0c216d4c1518 k8sPodName=local-path-storage/helper-pod-create-pvc-2460758e-d7be-4bd2-98b0-046ab2395e6b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b84bc726b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2460758e-d7be-4bd2-98b0-046ab2395e6b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b84bc726b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2460758e-d7be-4bd2-98b0-046ab2395e6b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b84bc726b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=7786 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2460758e-d7be-4bd2-98b0-046ab2395e6b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b84bc726b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=7786 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2460758e-d7be-4bd2-98b0-046ab2395e6b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b84bc726b6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1173 identity=7786 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2460758e-d7be-4bd2-98b0-046ab2395e6b subsys=endpoint level=info msg="Successful endpoint creation" containerID=b84bc726b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1173 identity=7786 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2460758e-d7be-4bd2-98b0-046ab2395e6b subsys=daemon level=info msg="Delete endpoint request" containerID=b84bc726b6 endpointID=1173 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2460758e-d7be-4bd2-98b0-046ab2395e6b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b84bc726b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1173 identity=7786 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2460758e-d7be-4bd2-98b0-046ab2395e6b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 c76ba8af-8fe9-4aed-ad68-2417571e9776 default }" containerID=22823acebe252318b21477c2e60ea2e2268550b2e012b6ef5a939a8406617296 datapathConfiguration="&{false false false false false }" interface=lxc97b09b35b57c k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22823acebe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22823acebe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=22823acebe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22823acebe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identity=14118 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22823acebe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identity=14118 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22823acebe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=543 identity=14118 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=22823acebe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=543 identity=14118 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.68 491c9861-b2c3-44bb-9072-b574255a1136 default }" containerID=da1fcfe4e85490df876e938f436fffdb987588874d959772d9e58eea2c35caab datapathConfiguration="&{false false false false false }" interface=lxce7e83e212be0 k8sPodName=openstack/keystone-api-99f5b49cf-4xcf8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da1fcfe4e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2187 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-api-99f5b49cf-4xcf8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da1fcfe4e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2187 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-api-99f5b49cf-4xcf8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da1fcfe4e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2187 identity=36624 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-api-99f5b49cf-4xcf8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da1fcfe4e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2187 identity=36624 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-api-99f5b49cf-4xcf8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.69 279b8a0e-b835-4768-b07a-a51e98e538dc default }" containerID=8f3cb2ca67166504bc17d445ae7fbecb613afa33d67ff57c9cd5cf2b3b5ba88b datapathConfiguration="&{false false false false false }" interface=lxc2449887bad58 k8sPodName=openstack/keystone-credential-setup-429ff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f3cb2ca67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1193 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-credential-setup-429ff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f3cb2ca67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1193 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f239075e-bf8f-48b5-b96f-e00f3db9a698,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=f239075e-bf8f-48b5-b96f-e00f3db9a698,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-credential-setup-429ff subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f239075e-bf8f-48b5-b96f-e00f3db9a698;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=f239075e-bf8f-48b5-b96f-e00f3db9a698;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f3cb2ca67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1193 identity=64802 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f239075e-bf8f-48b5-b96f-e00f3db9a698,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=f239075e-bf8f-48b5-b96f-e00f3db9a698,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-credential-setup-429ff oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f3cb2ca67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1193 identity=64802 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-credential-setup-429ff subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da1fcfe4e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2187 identity=36624 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-api-99f5b49cf-4xcf8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=da1fcfe4e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2187 identity=36624 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-api-99f5b49cf-4xcf8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8f3cb2ca67 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1193 identity=64802 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-credential-setup-429ff subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f3cb2ca67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1193 identity=64802 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-credential-setup-429ff subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8f3cb2ca67 endpointID=1193 k8sNamespace=openstack k8sPodName=keystone-credential-setup-429ff subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f239075e-bf8f-48b5-b96f-e00f3db9a698 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=f239075e-bf8f-48b5-b96f-e00f3db9a698 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8f3cb2ca67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1193 identity=64802 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-credential-setup-429ff subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 b7d2b727-7ac8-44d9-b0d7-6aed7a6d437d default }" containerID=7d3a25b921fd00bf903760fae2dc6a0c726a2241208696c3c461bdf4b1e801f8 datapathConfiguration="&{false false false false false }" interface=lxc5549b472f456 k8sPodName=openstack/keystone-db-init-vksj6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d3a25b921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-db-init-vksj6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d3a25b921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=89a4a9f4-2eb5-402c-b1f0-2b371f034df5,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=89a4a9f4-2eb5-402c-b1f0-2b371f034df5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-db-init-vksj6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7d3a25b921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-db-init-vksj6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=89a4a9f4-2eb5-402c-b1f0-2b371f034df5;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=89a4a9f4-2eb5-402c-b1f0-2b371f034df5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d3a25b921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identity=53172 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=89a4a9f4-2eb5-402c-b1f0-2b371f034df5,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=89a4a9f4-2eb5-402c-b1f0-2b371f034df5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-db-init-vksj6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d3a25b921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identity=53172 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-db-init-vksj6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d3a25b921 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=499 identity=53172 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-db-init-vksj6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d3a25b921 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=499 identity=53172 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-db-init-vksj6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7d3a25b921 endpointID=499 k8sNamespace=openstack k8sPodName=keystone-db-init-vksj6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=89a4a9f4-2eb5-402c-b1f0-2b371f034df5 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=89a4a9f4-2eb5-402c-b1f0-2b371f034df5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7d3a25b921 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=499 identity=53172 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-db-init-vksj6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 bc242369-67e8-45e6-a8f6-02c3d747ab29 default }" containerID=596369d2cc491208bcea3142b36df1f3f6f0dec9d5121587065c5a9fd5ebc226 datapathConfiguration="&{false false false false false }" interface=lxce4039cc490c7 k8sPodName=openstack/keystone-fernet-setup-fgvws labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=596369d2cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-fgvws subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=596369d2cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=aae53b94-4c26-446c-a5ad-8d635d91ceb1,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=aae53b94-4c26-446c-a5ad-8d635d91ceb1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-fgvws subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=aae53b94-4c26-446c-a5ad-8d635d91ceb1;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=aae53b94-4c26-446c-a5ad-8d635d91ceb1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=596369d2cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identity=24772 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=aae53b94-4c26-446c-a5ad-8d635d91ceb1,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=aae53b94-4c26-446c-a5ad-8d635d91ceb1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-fgvws oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=596369d2cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identity=24772 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-fgvws subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=596369d2cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=387 identity=24772 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-fgvws subsys=endpoint level=info msg="Successful endpoint creation" containerID=596369d2cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=387 identity=24772 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-fgvws subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=596369d2cc endpointID=387 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-fgvws subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=aae53b94-4c26-446c-a5ad-8d635d91ceb1 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=aae53b94-4c26-446c-a5ad-8d635d91ceb1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=596369d2cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=387 identity=24772 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-fernet-setup-fgvws subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 6fa11f0b-6bfc-47ca-967e-3ddc7be38c48 default }" containerID=868e77d43761ce9cb79ea69fb6e50182801d44638eb6acf5ddf87ffe26bc723c datapathConfiguration="&{false false false false false }" interface=lxce1d2811e9c3b k8sPodName=openstack/keystone-db-sync-gsmp2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=868e77d437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-db-sync-gsmp2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=868e77d437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=af560a4d-17a3-4014-b1bd-d49e2d6185af,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=af560a4d-17a3-4014-b1bd-d49e2d6185af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-db-sync-gsmp2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=af560a4d-17a3-4014-b1bd-d49e2d6185af;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=af560a4d-17a3-4014-b1bd-d49e2d6185af;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=868e77d437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identity=1302 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=af560a4d-17a3-4014-b1bd-d49e2d6185af,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=af560a4d-17a3-4014-b1bd-d49e2d6185af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-db-sync-gsmp2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=868e77d437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identity=1302 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-db-sync-gsmp2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=868e77d437 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1038 identity=1302 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-db-sync-gsmp2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=868e77d437 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1038 identity=1302 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-db-sync-gsmp2 subsys=daemon level=info msg="Delete endpoint request" containerID=868e77d437 endpointID=1038 k8sNamespace=openstack k8sPodName=keystone-db-sync-gsmp2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=af560a4d-17a3-4014-b1bd-d49e2d6185af k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=af560a4d-17a3-4014-b1bd-d49e2d6185af k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=868e77d437 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1038 identity=1302 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-db-sync-gsmp2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 26526841-8294-42c8-88fe-d6dc55def0d6 default }" containerID=60a699309da4da5c7f5b54fcc6502ac50774ace2308e9397c7ea29db33906fa3 datapathConfiguration="&{false false false false false }" interface=lxcc2e671005f1d k8sPodName=openstack/keystone-rabbit-init-wng9l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60a699309d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3888 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-rabbit-init-wng9l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60a699309d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3888 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d7a6233a-d5cc-4182-ab1a-e271ee7367e6,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d7a6233a-d5cc-4182-ab1a-e271ee7367e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-rabbit-init-wng9l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d7a6233a-d5cc-4182-ab1a-e271ee7367e6;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d7a6233a-d5cc-4182-ab1a-e271ee7367e6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60a699309d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3888 identity=611 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d7a6233a-d5cc-4182-ab1a-e271ee7367e6,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d7a6233a-d5cc-4182-ab1a-e271ee7367e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-rabbit-init-wng9l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60a699309d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3888 identity=611 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-rabbit-init-wng9l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=60a699309d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3888 identity=611 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-rabbit-init-wng9l subsys=endpoint level=info msg="Successful endpoint creation" containerID=60a699309d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3888 identity=611 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-rabbit-init-wng9l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=60a699309d endpointID=3888 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-wng9l subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d7a6233a-d5cc-4182-ab1a-e271ee7367e6 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d7a6233a-d5cc-4182-ab1a-e271ee7367e6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=60a699309d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3888 identity=611 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-rabbit-init-wng9l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 8918dbff-2f14-45a9-add2-41523a4112d1 default }" containerID=8ac1df16b351f8602109f8e817a4150256bb140bce23c6787bdcc272ce7877e3 datapathConfiguration="&{false false false false false }" interface=lxc1a219790529b k8sPodName=openstack/keystone-domain-manage-smxwt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ac1df16b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-domain-manage-smxwt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ac1df16b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ba0ee213-0947-4665-9c03-775986be60ed,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ba0ee213-0947-4665-9c03-775986be60ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-domain-manage-smxwt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ba0ee213-0947-4665-9c03-775986be60ed;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=ba0ee213-0947-4665-9c03-775986be60ed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ac1df16b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 identity=43363 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ba0ee213-0947-4665-9c03-775986be60ed,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ba0ee213-0947-4665-9c03-775986be60ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-domain-manage-smxwt oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8ac1df16b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 identity=43363 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-domain-manage-smxwt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ac1df16b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=752 identity=43363 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-domain-manage-smxwt subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ac1df16b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=752 identity=43363 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-domain-manage-smxwt subsys=daemon level=info msg="Delete endpoint request" containerID=8ac1df16b3 endpointID=752 k8sNamespace=openstack k8sPodName=keystone-domain-manage-smxwt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ba0ee213-0947-4665-9c03-775986be60ed k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=ba0ee213-0947-4665-9c03-775986be60ed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8ac1df16b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=752 identity=43363 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-domain-manage-smxwt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 cf4bb47d-bb30-4ef8-8e0d-ce4c9c88c5ef default }" containerID=cd07fe8ee9b0ee6d78a1b297656dc22a5f45fbaa2ae18f3555993f55135d04fc datapathConfiguration="&{false false false false false }" interface=lxce3ac72889b79 k8sPodName=openstack/keystone-bootstrap-gff8h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd07fe8ee9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-bootstrap-gff8h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd07fe8ee9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d4e7cb49-c04d-41a4-8475-f5845d3ff163,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=d4e7cb49-c04d-41a4-8475-f5845d3ff163,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-bootstrap-gff8h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d4e7cb49-c04d-41a4-8475-f5845d3ff163;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=d4e7cb49-c04d-41a4-8475-f5845d3ff163;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd07fe8ee9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identity=26795 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d4e7cb49-c04d-41a4-8475-f5845d3ff163,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=d4e7cb49-c04d-41a4-8475-f5845d3ff163,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-bootstrap-gff8h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd07fe8ee9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identity=26795 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-bootstrap-gff8h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cd07fe8ee9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3752 identity=26795 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-bootstrap-gff8h subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd07fe8ee9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3752 identity=26795 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-bootstrap-gff8h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cd07fe8ee9 endpointID=3752 k8sNamespace=openstack k8sPodName=keystone-bootstrap-gff8h subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d4e7cb49-c04d-41a4-8475-f5845d3ff163 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=d4e7cb49-c04d-41a4-8475-f5845d3ff163 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=cd07fe8ee9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3752 identity=26795 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-bootstrap-gff8h subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03430072909762333 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.60 dba8d510-c406-47c9-b1dc-8367684747d6 default }" containerID=fbf2c50ff5f26e8cdf1d8d41d86c6b3cec3c48c0c874598062b152e802205b8e datapathConfiguration="&{false false false false false }" interface=lxc2a7b0358c792 k8sPodName=local-path-storage/helper-pod-create-pvc-7a591930-8c9f-4314-a61b-8d39357ae67a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbf2c50ff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3243 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a591930-8c9f-4314-a61b-8d39357ae67a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbf2c50ff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3243 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a591930-8c9f-4314-a61b-8d39357ae67a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fbf2c50ff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3243 identity=7786 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a591930-8c9f-4314-a61b-8d39357ae67a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fbf2c50ff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3243 identity=7786 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a591930-8c9f-4314-a61b-8d39357ae67a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fbf2c50ff5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3243 identity=7786 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a591930-8c9f-4314-a61b-8d39357ae67a subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbf2c50ff5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3243 identity=7786 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a591930-8c9f-4314-a61b-8d39357ae67a subsys=daemon level=info msg="Delete endpoint request" containerID=fbf2c50ff5 endpointID=3243 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7a591930-8c9f-4314-a61b-8d39357ae67a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fbf2c50ff5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3243 identity=7786 ipv4=10.0.0.60 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a591930-8c9f-4314-a61b-8d39357ae67a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 c4c49345-3c6a-4723-985c-ab1555a471a4 default }" containerID=1a4ae98ca792dd7e81869a37b77ae7e376bed1dc90a1a8fce1b0aa6c085dbfa9 datapathConfiguration="&{false false false false false }" interface=lxc3a6dba5144f0 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a4ae98ca7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a4ae98ca7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1a4ae98ca7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 identity=34750 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a4ae98ca7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 identity=34750 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a4ae98ca7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=609 identity=34750 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a4ae98ca7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=609 identity=34750 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.187 82ca0512-aaef-404c-998a-964e2fac2312 default }" containerID=74171cf50ddf660daed3e1bdae06d65cbb33dd72062af0902d72014a7239bfd6 datapathConfiguration="&{false false false false false }" interface=lxcfb652a172b25 k8sPodName=openstack/barbican-api-7ff5cb794b-prvxt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74171cf50d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3113 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-api-7ff5cb794b-prvxt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74171cf50d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3113 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-api-7ff5cb794b-prvxt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74171cf50d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3113 identity=5313 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-api-7ff5cb794b-prvxt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74171cf50d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3113 identity=5313 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-api-7ff5cb794b-prvxt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 b88997c1-98a3-40c9-818e-dfb2e0448c99 default }" containerID=af62c10b970b83df8cfc8c15d98bbcffc90b33b6973f5746e1ee51a183a7a26c datapathConfiguration="&{false false false false false }" interface=lxc0093f56aefa1 k8sPodName=openstack/barbican-db-init-59765 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af62c10b97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/barbican-db-init-59765 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af62c10b97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5390ae38-e7fe-4832-b420-bd366d6a549e,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=5390ae38-e7fe-4832-b420-bd366d6a549e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/barbican-db-init-59765 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5390ae38-e7fe-4832-b420-bd366d6a549e;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=5390ae38-e7fe-4832-b420-bd366d6a549e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af62c10b97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identity=29759 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5390ae38-e7fe-4832-b420-bd366d6a549e,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=5390ae38-e7fe-4832-b420-bd366d6a549e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/barbican-db-init-59765 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af62c10b97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identity=29759 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/barbican-db-init-59765 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74171cf50d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3113 identity=5313 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-api-7ff5cb794b-prvxt subsys=endpoint level=info msg="Successful endpoint creation" containerID=74171cf50d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3113 identity=5313 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-api-7ff5cb794b-prvxt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=af62c10b97 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=740 identity=29759 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/barbican-db-init-59765 subsys=endpoint level=info msg="Successful endpoint creation" containerID=af62c10b97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=740 identity=29759 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/barbican-db-init-59765 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=af62c10b97 endpointID=740 k8sNamespace=openstack k8sPodName=barbican-db-init-59765 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5390ae38-e7fe-4832-b420-bd366d6a549e k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=5390ae38-e7fe-4832-b420-bd366d6a549e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=af62c10b97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=740 identity=29759 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/barbican-db-init-59765 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 ca5e2e85-fc0c-4e35-b514-e0376a32df9e default }" containerID=451fdd63cb87399746824e50947fc8353af327ac20138833617110b6447269c8 datapathConfiguration="&{false false false false false }" interface=lxc48196f2a6462 k8sPodName=openstack/barbican-db-sync-r577c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=451fdd63cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-db-sync-r577c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=451fdd63cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=75738115-19d7-4e40-b586-abba69ebf7ce,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=75738115-19d7-4e40-b586-abba69ebf7ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-db-sync-r577c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=451fdd63cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-db-sync-r577c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=75738115-19d7-4e40-b586-abba69ebf7ce;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=75738115-19d7-4e40-b586-abba69ebf7ce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=451fdd63cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=38252 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=75738115-19d7-4e40-b586-abba69ebf7ce,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=75738115-19d7-4e40-b586-abba69ebf7ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-db-sync-r577c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=451fdd63cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=38252 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-db-sync-r577c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=451fdd63cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=82 identity=38252 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-db-sync-r577c subsys=endpoint level=info msg="Successful endpoint creation" containerID=451fdd63cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=82 identity=38252 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-db-sync-r577c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=451fdd63cb endpointID=82 k8sNamespace=openstack k8sPodName=barbican-db-sync-r577c subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=75738115-19d7-4e40-b586-abba69ebf7ce k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=75738115-19d7-4e40-b586-abba69ebf7ce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=451fdd63cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=82 identity=38252 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-db-sync-r577c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 86299f64-d03a-41b3-aa66-f57ad2aecba8 default }" containerID=eaf49ae3ca4f493d3644a6bc6723e926d2e019a55cb0d21bbec9c8be8465c40b datapathConfiguration="&{false false false false false }" interface=lxc697b33c6591d k8sPodName=openstack/barbican-rabbit-init-cgl42 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eaf49ae3ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-rabbit-init-cgl42 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eaf49ae3ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0b14a319-af22-4649-904f-a7d6140056dd,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0b14a319-af22-4649-904f-a7d6140056dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-rabbit-init-cgl42 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0b14a319-af22-4649-904f-a7d6140056dd;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=0b14a319-af22-4649-904f-a7d6140056dd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eaf49ae3ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 identity=4833 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0b14a319-af22-4649-904f-a7d6140056dd,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0b14a319-af22-4649-904f-a7d6140056dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-rabbit-init-cgl42 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eaf49ae3ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 identity=4833 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-rabbit-init-cgl42 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=eaf49ae3ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=190 identity=4833 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-rabbit-init-cgl42 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eaf49ae3ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=190 identity=4833 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-rabbit-init-cgl42 subsys=daemon level=info msg="Delete endpoint request" containerID=eaf49ae3ca endpointID=190 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-cgl42 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0b14a319-af22-4649-904f-a7d6140056dd k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=0b14a319-af22-4649-904f-a7d6140056dd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=eaf49ae3ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=190 identity=4833 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/barbican-rabbit-init-cgl42 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 76a3804d-7596-4eec-bb3e-191acce404a1 default }" containerID=6f7cd1c684424895603eadfdd5e9c292de03dd0ba79e8486475b4b811d29ce26 datapathConfiguration="&{false false false false false }" interface=lxccaf532c585a2 k8sPodName=openstack/barbican-ks-service-vkqlf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f7cd1c684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-ks-service-vkqlf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f7cd1c684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b2161cfb-93fb-46c3-8503-8b8bd13d2ee6,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=b2161cfb-93fb-46c3-8503-8b8bd13d2ee6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-ks-service-vkqlf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b2161cfb-93fb-46c3-8503-8b8bd13d2ee6;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=b2161cfb-93fb-46c3-8503-8b8bd13d2ee6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6f7cd1c684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identity=20262 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b2161cfb-93fb-46c3-8503-8b8bd13d2ee6,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=b2161cfb-93fb-46c3-8503-8b8bd13d2ee6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-ks-service-vkqlf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f7cd1c684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identity=20262 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-ks-service-vkqlf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6f7cd1c684 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1204 identity=20262 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-ks-service-vkqlf subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f7cd1c684 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1204 identity=20262 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-ks-service-vkqlf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6f7cd1c684 endpointID=1204 k8sNamespace=openstack k8sPodName=barbican-ks-service-vkqlf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b2161cfb-93fb-46c3-8503-8b8bd13d2ee6 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=b2161cfb-93fb-46c3-8503-8b8bd13d2ee6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6f7cd1c684 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1204 identity=20262 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-ks-service-vkqlf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 87eb98ec-e2df-496c-9f96-c010d0712cd0 default }" containerID=6719cb1309fd193894f584c1d4c969fc50cfb387140eace281e1672424254400 datapathConfiguration="&{false false false false false }" interface=lxcd6b62dcf6315 k8sPodName=openstack/barbican-ks-endpoints-k4zqr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6719cb1309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k4zqr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6719cb1309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=575afbdf-025c-4c07-be8f-1ff6f7978e1d,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=575afbdf-025c-4c07-be8f-1ff6f7978e1d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k4zqr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=575afbdf-025c-4c07-be8f-1ff6f7978e1d;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=575afbdf-025c-4c07-be8f-1ff6f7978e1d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6719cb1309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k4zqr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6719cb1309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identity=57726 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=575afbdf-025c-4c07-be8f-1ff6f7978e1d,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=575afbdf-025c-4c07-be8f-1ff6f7978e1d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k4zqr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6719cb1309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identity=57726 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k4zqr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6719cb1309 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=230 identity=57726 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k4zqr subsys=endpoint level=info msg="Successful endpoint creation" containerID=6719cb1309 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=230 identity=57726 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k4zqr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6719cb1309 endpointID=230 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-k4zqr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=575afbdf-025c-4c07-be8f-1ff6f7978e1d k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=575afbdf-025c-4c07-be8f-1ff6f7978e1d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6719cb1309 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=230 identity=57726 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k4zqr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 24e641f0-ba5e-480d-8989-69a90183aefc default }" containerID=d3a3b1bba5769abb02f6933a4b7d863f132df03fd65d5d1e17dfab9109b5fb50 datapathConfiguration="&{false false false false false }" interface=lxcd47a65b8f3ce k8sPodName=openstack/barbican-ks-user-jcg5p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3a3b1bba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2773 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-ks-user-jcg5p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3a3b1bba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2773 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e76434c1-b7b1-40df-a21d-3b52e603733c,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=e76434c1-b7b1-40df-a21d-3b52e603733c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-ks-user-jcg5p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d3a3b1bba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2773 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-ks-user-jcg5p line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e76434c1-b7b1-40df-a21d-3b52e603733c;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=e76434c1-b7b1-40df-a21d-3b52e603733c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d3a3b1bba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2773 identity=46149 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e76434c1-b7b1-40df-a21d-3b52e603733c,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=e76434c1-b7b1-40df-a21d-3b52e603733c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-ks-user-jcg5p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d3a3b1bba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2773 identity=46149 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-ks-user-jcg5p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d3a3b1bba5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2773 identity=46149 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-ks-user-jcg5p subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3a3b1bba5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2773 identity=46149 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-ks-user-jcg5p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d3a3b1bba5 endpointID=2773 k8sNamespace=openstack k8sPodName=barbican-ks-user-jcg5p subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e76434c1-b7b1-40df-a21d-3b52e603733c k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=e76434c1-b7b1-40df-a21d-3b52e603733c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d3a3b1bba5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2773 identity=46149 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-ks-user-jcg5p subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.64 9f35438e-0372-404d-8f29-2215e38b8054 default }" containerID=615bf040b509888c6abc5e6672b7a9d65aff65dd04a9960da306b0311e873470 datapathConfiguration="&{false false false false false }" interface=lxcb12b5c79c697 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dwhz7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=615bf040b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 ipv4=10.0.0.64 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dwhz7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=615bf040b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.64 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dwhz7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=615bf040b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identity=55558 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.64 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dwhz7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=615bf040b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identity=55558 ipv4=10.0.0.64 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dwhz7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=615bf040b5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=174 identity=55558 ipv4=10.0.0.64 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dwhz7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=615bf040b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=174 identity=55558 ipv4=10.0.0.64 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dwhz7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.143 9f68d04a-be76-413d-874a-b5e39b5d304d default }" containerID=4ab2021c28c4891cad2ee3c5c49d553fcde72810f19f49a13489cf6437e1792f datapathConfiguration="&{false false false false false }" interface=lxc39608d80305a k8sPodName=openstack/rook-ceph-detect-version-9lfvp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ab2021c28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3389 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9lfvp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ab2021c28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3389 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=3c76e883-ae83-43b2-af1d-4c93bb7e1dad,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=3c76e883-ae83-43b2-af1d-4c93bb7e1dad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9lfvp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=3c76e883-ae83-43b2-af1d-4c93bb7e1dad;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=3c76e883-ae83-43b2-af1d-4c93bb7e1dad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ab2021c28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3389 identity=9348 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=3c76e883-ae83-43b2-af1d-4c93bb7e1dad,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=3c76e883-ae83-43b2-af1d-4c93bb7e1dad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9lfvp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ab2021c28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3389 identity=9348 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9lfvp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4ab2021c28 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3389 identity=9348 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9lfvp subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ab2021c28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3389 identity=9348 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9lfvp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4ab2021c28 endpointID=3389 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-9lfvp subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=3c76e883-ae83-43b2-af1d-4c93bb7e1dad k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=3c76e883-ae83-43b2-af1d-4c93bb7e1dad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=4ab2021c28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3389 identity=9348 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9lfvp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 ebae0ce6-c3ed-4136-8e8c-a24b91303b06 default }" containerID=de904b355629bf0a11f24486b8af60807fbcdd2400064071afc7764f12aa6618 datapathConfiguration="&{false false false false false }" interface=lxc81c549ed9f8b k8sPodName=openstack/ceph-object-controller-detect-version-jv9mt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de904b3556 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3544 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jv9mt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de904b3556 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3544 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=ea521b8b-cbec-47f3-892a-53c7fb2cd0a8,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=ea521b8b-cbec-47f3-892a-53c7fb2cd0a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jv9mt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=ea521b8b-cbec-47f3-892a-53c7fb2cd0a8;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=ea521b8b-cbec-47f3-892a-53c7fb2cd0a8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de904b3556 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3544 identity=13356 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=ea521b8b-cbec-47f3-892a-53c7fb2cd0a8,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=ea521b8b-cbec-47f3-892a-53c7fb2cd0a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jv9mt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de904b3556 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3544 identity=13356 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jv9mt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de904b3556 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3544 identity=13356 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jv9mt subsys=endpoint level=info msg="Successful endpoint creation" containerID=de904b3556 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3544 identity=13356 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jv9mt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=de904b3556 endpointID=3544 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-jv9mt subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=ea521b8b-cbec-47f3-892a-53c7fb2cd0a8 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=ea521b8b-cbec-47f3-892a-53c7fb2cd0a8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=de904b3556 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3544 identity=13356 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jv9mt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 edf25c5f-1c93-469f-b965-36fbdd36cc64 default }" containerID=6046d4a07aebf938a7a3734f058a0e866343a7c64eaf70c2942f8f6e091ca050 datapathConfiguration="&{false false false false false }" interface=lxc9251b37eab4b k8sPodName=local-path-storage/helper-pod-create-pvc-402257a4-4538-4b21-bd0d-ed4bd28857a6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6046d4a07a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3432 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-402257a4-4538-4b21-bd0d-ed4bd28857a6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6046d4a07a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3432 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-402257a4-4538-4b21-bd0d-ed4bd28857a6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6046d4a07a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3432 identity=7786 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-402257a4-4538-4b21-bd0d-ed4bd28857a6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6046d4a07a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3432 identity=7786 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-402257a4-4538-4b21-bd0d-ed4bd28857a6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6046d4a07a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3432 identity=7786 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-402257a4-4538-4b21-bd0d-ed4bd28857a6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6046d4a07a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3432 identity=7786 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-402257a4-4538-4b21-bd0d-ed4bd28857a6 subsys=daemon level=info msg="Delete endpoint request" containerID=6046d4a07a endpointID=3432 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-402257a4-4538-4b21-bd0d-ed4bd28857a6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6046d4a07a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3432 identity=7786 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-402257a4-4538-4b21-bd0d-ed4bd28857a6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 8bb5fac2-127b-43f5-aaab-a9d8b382666c default }" containerID=f9015125a8785f38cc5d42e7a187d31c1371d0def28f22150b03d839fb2e377f datapathConfiguration="&{false false false false false }" interface=lxc4c36c9d767f0 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9015125a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1149 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9015125a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1149 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9015125a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1149 identity=18364 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9015125a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1149 identity=18364 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9015125a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1149 identity=18364 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9015125a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1149 identity=18364 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.214 9a07053a-914b-418d-8012-7f47aa07eccd default }" containerID=e06e401bce3b2db5140b610f1e076ce48047d3747d7a2c064b20550b6ef2ddf4 datapathConfiguration="&{false false false false false }" interface=lxce5457daf0a0c k8sPodName=openstack/glance-db-init-bvjg6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e06e401bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1435 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-db-init-bvjg6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e06e401bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1435 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4686568a-fd2b-42fa-8532-b594f5e5b809,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=4686568a-fd2b-42fa-8532-b594f5e5b809,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-db-init-bvjg6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4686568a-fd2b-42fa-8532-b594f5e5b809;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=4686568a-fd2b-42fa-8532-b594f5e5b809;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e06e401bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1435 identity=11060 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4686568a-fd2b-42fa-8532-b594f5e5b809,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=4686568a-fd2b-42fa-8532-b594f5e5b809,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-db-init-bvjg6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e06e401bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1435 identity=11060 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-db-init-bvjg6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e06e401bce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1435 identity=11060 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-db-init-bvjg6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e06e401bce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1435 identity=11060 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-db-init-bvjg6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e06e401bce endpointID=1435 k8sNamespace=openstack k8sPodName=glance-db-init-bvjg6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4686568a-fd2b-42fa-8532-b594f5e5b809 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=4686568a-fd2b-42fa-8532-b594f5e5b809 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e06e401bce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1435 identity=11060 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-db-init-bvjg6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 940d3a7d-36fa-4171-98ba-272b7172a1db default }" containerID=e534eae36e00b1a6ab06074535863b480a203ff53d6ea2c38e92aca5dc4b991e datapathConfiguration="&{false false false false false }" interface=lxc12304ed256b9 k8sPodName=openstack/glance-db-sync-v825t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e534eae36e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-db-sync-v825t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e534eae36e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6ee918f1-d3a6-4550-82fd-aff2d4830b75,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=6ee918f1-d3a6-4550-82fd-aff2d4830b75,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-db-sync-v825t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e534eae36e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-db-sync-v825t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6ee918f1-d3a6-4550-82fd-aff2d4830b75;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=6ee918f1-d3a6-4550-82fd-aff2d4830b75;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e534eae36e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 identity=11154 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6ee918f1-d3a6-4550-82fd-aff2d4830b75,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=6ee918f1-d3a6-4550-82fd-aff2d4830b75,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-db-sync-v825t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e534eae36e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 identity=11154 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-db-sync-v825t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e534eae36e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=335 identity=11154 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-db-sync-v825t subsys=endpoint level=info msg="Successful endpoint creation" containerID=e534eae36e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=335 identity=11154 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-db-sync-v825t subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.15 9c4d4f55-9174-454f-9857-22e85e52e70a default }" containerID=4044fe6e2ac4f8bc6e0b52ebc3d7a89952f16ba97e58d0eb25111956039c6a0a datapathConfiguration="&{false false false false false }" interface=lxc60d8ff3490d0 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-zthlf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4044fe6e2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-zthlf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4044fe6e2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-zthlf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4044fe6e2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=33526 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-zthlf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4044fe6e2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=33526 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-zthlf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 5495b1ed-6a4e-4b0d-8772-53fd01bdb7bf default }" containerID=bf2fc85de2a3c3c3a05974efb98b7f0bf001746e343a3e1b086c72afed9022fd datapathConfiguration="&{false false false false false }" interface=lxc7791c0a2bcbb k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-28c8z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf2fc85de2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-28c8z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf2fc85de2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-28c8z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf2fc85de2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identity=25834 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-28c8z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf2fc85de2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identity=25834 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-28c8z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4044fe6e2a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=15 identity=33526 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-zthlf subsys=endpoint level=info msg="Successful endpoint creation" containerID=4044fe6e2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=15 identity=33526 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-zthlf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bf2fc85de2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=956 identity=25834 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-28c8z subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf2fc85de2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=956 identity=25834 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-28c8z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e534eae36e endpointID=335 k8sNamespace=openstack k8sPodName=glance-db-sync-v825t subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6ee918f1-d3a6-4550-82fd-aff2d4830b75 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=6ee918f1-d3a6-4550-82fd-aff2d4830b75 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e534eae36e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=335 identity=11154 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-db-sync-v825t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 a451786a-b328-49fe-ad49-ce03945d6593 default }" containerID=962105e209ee321c120bc7f5686a7ecf8a2c2a8761b15cb1dbc6dc3d416da5ae datapathConfiguration="&{false false false false false }" interface=lxcc4a1bd5ab1bf k8sPodName=openstack/glance-rabbit-init-twzr4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=962105e209 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2860 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-rabbit-init-twzr4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=962105e209 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2860 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0f69aef7-166e-41f3-b82c-04b440505aef,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0f69aef7-166e-41f3-b82c-04b440505aef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-rabbit-init-twzr4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=962105e209 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2860 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-rabbit-init-twzr4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0f69aef7-166e-41f3-b82c-04b440505aef;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=0f69aef7-166e-41f3-b82c-04b440505aef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=962105e209 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2860 identity=27622 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0f69aef7-166e-41f3-b82c-04b440505aef,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0f69aef7-166e-41f3-b82c-04b440505aef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-rabbit-init-twzr4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=962105e209 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2860 identity=27622 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-rabbit-init-twzr4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=962105e209 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2860 identity=27622 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-rabbit-init-twzr4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=962105e209 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2860 identity=27622 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-rabbit-init-twzr4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=962105e209 endpointID=2860 k8sNamespace=openstack k8sPodName=glance-rabbit-init-twzr4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0f69aef7-166e-41f3-b82c-04b440505aef k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=0f69aef7-166e-41f3-b82c-04b440505aef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=962105e209 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2860 identity=27622 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-rabbit-init-twzr4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 434e9c9b-2076-4969-88f3-4a6711272bb5 default }" containerID=70bd112e846ea9f679903b6c5a7214d5e40e4a804817f306adb6be42bfb9edcd datapathConfiguration="&{false false false false false }" interface=lxcf49c6b8da559 k8sPodName=openstack/glance-ks-service-mg59m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70bd112e84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-service-mg59m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70bd112e84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6b2cdc5b-7722-481b-9aa0-5ff64edb9e78,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=6b2cdc5b-7722-481b-9aa0-5ff64edb9e78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-service-mg59m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6b2cdc5b-7722-481b-9aa0-5ff64edb9e78;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=6b2cdc5b-7722-481b-9aa0-5ff64edb9e78;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70bd112e84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identity=4119 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6b2cdc5b-7722-481b-9aa0-5ff64edb9e78,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=6b2cdc5b-7722-481b-9aa0-5ff64edb9e78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-service-mg59m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70bd112e84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identity=4119 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-service-mg59m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=70bd112e84 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=986 identity=4119 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-service-mg59m subsys=endpoint level=info msg="Successful endpoint creation" containerID=70bd112e84 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=986 identity=4119 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-service-mg59m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=70bd112e84 endpointID=986 k8sNamespace=openstack k8sPodName=glance-ks-service-mg59m subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6b2cdc5b-7722-481b-9aa0-5ff64edb9e78 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=6b2cdc5b-7722-481b-9aa0-5ff64edb9e78 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=70bd112e84 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=986 identity=4119 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-service-mg59m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 742d0db0-6738-40dd-b855-f45ef03dffaf default }" containerID=960cd1f979596978ca29ee122954d31f8ccb601d64813cc3cad20da8e4565961 datapathConfiguration="&{false false false false false }" interface=lxc1a64038acc98 k8sPodName=openstack/glance-ks-endpoints-9m7hv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=960cd1f979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2202 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-endpoints-9m7hv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=960cd1f979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2202 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f4999f88-8a95-4c43-aee4-aa8189c7af20,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f4999f88-8a95-4c43-aee4-aa8189c7af20,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-endpoints-9m7hv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f4999f88-8a95-4c43-aee4-aa8189c7af20;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f4999f88-8a95-4c43-aee4-aa8189c7af20;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=960cd1f979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2202 identity=4254 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f4999f88-8a95-4c43-aee4-aa8189c7af20,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f4999f88-8a95-4c43-aee4-aa8189c7af20,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-endpoints-9m7hv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=960cd1f979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2202 identity=4254 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-endpoints-9m7hv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=960cd1f979 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2202 identity=4254 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-endpoints-9m7hv subsys=endpoint level=info msg="Successful endpoint creation" containerID=960cd1f979 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2202 identity=4254 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-endpoints-9m7hv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=960cd1f979 endpointID=2202 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-9m7hv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f4999f88-8a95-4c43-aee4-aa8189c7af20 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f4999f88-8a95-4c43-aee4-aa8189c7af20 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=960cd1f979 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2202 identity=4254 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-endpoints-9m7hv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 80ae82ed-cfd9-4f1e-8aa1-b3ae9100f8c4 default }" containerID=9227d0661a4bf312e63de0a68fe794ce235881c9fbc6bb19931d5038d27b91c1 datapathConfiguration="&{false false false false false }" interface=lxc5b42186977bc k8sPodName=openstack/glance-ks-user-ss29q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9227d0661a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=692 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-user-ss29q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9227d0661a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=692 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bfdf0b0f-feb2-463e-9351-ff04d016fbb9,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=bfdf0b0f-feb2-463e-9351-ff04d016fbb9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-user-ss29q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bfdf0b0f-feb2-463e-9351-ff04d016fbb9;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=bfdf0b0f-feb2-463e-9351-ff04d016fbb9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9227d0661a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=692 identity=32707 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bfdf0b0f-feb2-463e-9351-ff04d016fbb9,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=bfdf0b0f-feb2-463e-9351-ff04d016fbb9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-user-ss29q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9227d0661a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=692 identity=32707 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-user-ss29q subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9227d0661a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=692 identity=32707 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-user-ss29q subsys=endpoint level=info msg="Successful endpoint creation" containerID=9227d0661a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=692 identity=32707 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-user-ss29q subsys=daemon level=info msg="Delete endpoint request" containerID=9227d0661a endpointID=692 k8sNamespace=openstack k8sPodName=glance-ks-user-ss29q subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bfdf0b0f-feb2-463e-9351-ff04d016fbb9 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=bfdf0b0f-feb2-463e-9351-ff04d016fbb9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9227d0661a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=692 identity=32707 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-user-ss29q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 1acc8287-8cc2-4b29-b625-2e555680f7fe default }" containerID=5682e1a67d9555f006863855e0d2f31c23e013941475734d87f23cb1ef90a626 datapathConfiguration="&{false false false false false }" interface=lxc12ae3a003068 k8sPodName=openstack/glance-metadefs-load-cmbqw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5682e1a67d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-metadefs-load-cmbqw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5682e1a67d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1db952b3-7af0-404d-9392-d26a750db047,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=1db952b3-7af0-404d-9392-d26a750db047,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-metadefs-load-cmbqw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1db952b3-7af0-404d-9392-d26a750db047;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=1db952b3-7af0-404d-9392-d26a750db047;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5682e1a67d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 identity=1979 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1db952b3-7af0-404d-9392-d26a750db047,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=1db952b3-7af0-404d-9392-d26a750db047,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-metadefs-load-cmbqw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5682e1a67d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 identity=1979 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-metadefs-load-cmbqw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5682e1a67d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3585 identity=1979 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-metadefs-load-cmbqw subsys=endpoint level=info msg="Successful endpoint creation" containerID=5682e1a67d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3585 identity=1979 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-metadefs-load-cmbqw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5682e1a67d endpointID=3585 k8sNamespace=openstack k8sPodName=glance-metadefs-load-cmbqw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1db952b3-7af0-404d-9392-d26a750db047 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=1db952b3-7af0-404d-9392-d26a750db047 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5682e1a67d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3585 identity=1979 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/glance-metadefs-load-cmbqw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 4658ef08-a7cd-44be-a687-19c262f8d481 default }" containerID=bb248860d63bd30d1a0efb221ebbfeb6c4191036babc2e7bdccc1086a2c44f37 datapathConfiguration="&{false false false false false }" interface=lxce7f3b1ec56ca k8sPodName=openstack/glance-storage-init-qvkj2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb248860d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-storage-init-qvkj2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb248860d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=690cd1ad-4953-4975-acc5-474f7523ee13,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=690cd1ad-4953-4975-acc5-474f7523ee13,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-storage-init-qvkj2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=690cd1ad-4953-4975-acc5-474f7523ee13;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=690cd1ad-4953-4975-acc5-474f7523ee13;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb248860d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 identity=44043 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=690cd1ad-4953-4975-acc5-474f7523ee13,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=690cd1ad-4953-4975-acc5-474f7523ee13,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-storage-init-qvkj2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb248860d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 identity=44043 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-storage-init-qvkj2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bb248860d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=778 identity=44043 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-storage-init-qvkj2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb248860d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=778 identity=44043 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-storage-init-qvkj2 subsys=daemon level=info msg="Delete endpoint request" containerID=bb248860d6 endpointID=778 k8sNamespace=openstack k8sPodName=glance-storage-init-qvkj2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=690cd1ad-4953-4975-acc5-474f7523ee13 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=690cd1ad-4953-4975-acc5-474f7523ee13 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bb248860d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=778 identity=44043 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-storage-init-qvkj2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 878ea26e-915e-47e5-9f1c-f667b6119633 default }" containerID=081eb81bd8a9729d4a5b5dfc82288465e4377c56228fcc3291ec1064d7d82151 datapathConfiguration="&{false false false false false }" interface=lxc449680007d04 k8sPodName=openstack/glance-api-6c8b7ddc49-k97wj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=081eb81bd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3048 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-api-6c8b7ddc49-k97wj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=081eb81bd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3048 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-api-6c8b7ddc49-k97wj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=081eb81bd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3048 identity=33903 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-api-6c8b7ddc49-k97wj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=081eb81bd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3048 identity=33903 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-api-6c8b7ddc49-k97wj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=081eb81bd8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3048 identity=33903 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-api-6c8b7ddc49-k97wj subsys=endpoint level=info msg="Successful endpoint creation" containerID=081eb81bd8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3048 identity=33903 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-api-6c8b7ddc49-k97wj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.102 9b805430-bb37-4c3b-8384-08a7d19056b3 default }" containerID=862c007a555747ab8d34c76453c3366979629d35e0f5d515369e00986791845a datapathConfiguration="&{false false false false false }" interface=lxcfe60e462d2e6 k8sPodName=openstack/staffeln-api-b666c8ff4-kpq5w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=862c007a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/staffeln-api-b666c8ff4-kpq5w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=862c007a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/staffeln-api-b666c8ff4-kpq5w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=862c007a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identity=8070 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/staffeln-api-b666c8ff4-kpq5w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=862c007a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identity=8070 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/staffeln-api-b666c8ff4-kpq5w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.242 c7d3c7d2-18d8-40b3-bd42-50f5c48c8225 default }" containerID=19c14356c8a11b9b1606e2ba59016ebcfe85326ababc49868c3d72fe2a46c759 datapathConfiguration="&{false false false false false }" interface=lxc4fcd4c6a94cd k8sPodName=openstack/staffeln-conductor-5d4c446f-z7hj4 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.89 d307d21b-f6d2-4082-b1bc-bc4652c854eb default }" containerID=eb1fdd218b318148ec577675c503604dd4b6b93ff22dea1c9f7816576fe24efb datapathConfiguration="&{false false false false false }" interface=lxca3b85be94151 k8sPodName=openstack/staffeln-db-init-464zb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19c14356c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-conductor-5d4c446f-z7hj4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19c14356c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-conductor-5d4c446f-z7hj4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="New endpoint" containerID=eb1fdd218b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1424 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/staffeln-db-init-464zb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb1fdd218b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1424 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e7b5b35d-615d-4b73-8a0c-a9746b5ea90f,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=e7b5b35d-615d-4b73-8a0c-a9746b5ea90f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/staffeln-db-init-464zb subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19c14356c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 identity=8224 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-conductor-5d4c446f-z7hj4 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=19c14356c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 identity=8224 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-conductor-5d4c446f-z7hj4 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=e7b5b35d-615d-4b73-8a0c-a9746b5ea90f;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=e7b5b35d-615d-4b73-8a0c-a9746b5ea90f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb1fdd218b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1424 identity=13808 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e7b5b35d-615d-4b73-8a0c-a9746b5ea90f,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=e7b5b35d-615d-4b73-8a0c-a9746b5ea90f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/staffeln-db-init-464zb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb1fdd218b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1424 identity=13808 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/staffeln-db-init-464zb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=862c007a55 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3418 identity=8070 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/staffeln-api-b666c8ff4-kpq5w subsys=endpoint level=info msg="Successful endpoint creation" containerID=862c007a55 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3418 identity=8070 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/staffeln-api-b666c8ff4-kpq5w subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=19c14356c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3567 identity=8224 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-conductor-5d4c446f-z7hj4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19c14356c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3567 identity=8224 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-conductor-5d4c446f-z7hj4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=eb1fdd218b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1424 identity=13808 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/staffeln-db-init-464zb subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb1fdd218b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1424 identity=13808 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/staffeln-db-init-464zb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eb1fdd218b endpointID=1424 k8sNamespace=openstack k8sPodName=staffeln-db-init-464zb subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=e7b5b35d-615d-4b73-8a0c-a9746b5ea90f k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=e7b5b35d-615d-4b73-8a0c-a9746b5ea90f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=eb1fdd218b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1424 identity=13808 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/staffeln-db-init-464zb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 da3cca8c-b9f1-4478-bedb-d859bad4f3b7 default }" containerID=c1c380fe01cebda70492e1978d2c0b94c4ab84d68b8e5fdcf33f2f07b27be7b7 datapathConfiguration="&{false false false false false }" interface=lxcd218a5eb5708 k8sPodName=openstack/staffeln-db-sync-jdpjc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1c380fe01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1142 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/staffeln-db-sync-jdpjc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1c380fe01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1142 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=a013d536-19d3-4048-9018-a2d7ca3f91ed,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=a013d536-19d3-4048-9018-a2d7ca3f91ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/staffeln-db-sync-jdpjc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=a013d536-19d3-4048-9018-a2d7ca3f91ed;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=a013d536-19d3-4048-9018-a2d7ca3f91ed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1c380fe01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1142 identity=28321 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=a013d536-19d3-4048-9018-a2d7ca3f91ed,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=a013d536-19d3-4048-9018-a2d7ca3f91ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/staffeln-db-sync-jdpjc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1c380fe01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1142 identity=28321 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/staffeln-db-sync-jdpjc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1c380fe01 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1142 identity=28321 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/staffeln-db-sync-jdpjc subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1c380fe01 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1142 identity=28321 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/staffeln-db-sync-jdpjc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager