level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="891.09µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="49.921µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="946.322µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="8.761µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=95.733241ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.24µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="21.671µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="60.451µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="78.562µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="76.351µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="464.28µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.12µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=402.056549ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.715693ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="41.341µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="41.811µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="253.216µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="112.253µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="68.982µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Start hook executed" duration=114.08924ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="125.263µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="25.71µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.84µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.233.0.0/16 level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.689154ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="5.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.602559ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="19.09µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=105.387912ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="10.86µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.19µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.421µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="5.36µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="29.67µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="16.32µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="72.482µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="352.328µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="20.46µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="8.771µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="221.345µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="825.829µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.260508ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.38µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="25.451µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.233 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.233 ipAddr.ipv6="" k8sNodeIP=199.204.45.233 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.233" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.118" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.233" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.233} {CiliumInternalIP 10.0.0.118}] 10.0.0.0/24 [] [] 10.0.0.41 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:37893" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=3.104671219s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="32.56µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="10.47µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="50.701µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="8.09µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2039 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2039 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2039 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=4.685361579s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=325.825452ms file-path=/var/run/cilium/state/templates/2d74468cb01de1747f937c4a4d216631c3560e6a2210a621cc20d73e993a8622/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2039 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 ipv4=10.0.0.41 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 identityLabels="reserved:health" ipv4=10.0.0.41 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 identity=4 identityLabels="reserved:health" ipv4=10.0.0.41 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 7a1e56f1-cfb6-4468-84f3-a7d78273d96a default }" containerID=e363927b6c3d86e72eca97bb022d10f4744690b3d8da6ba7e77281959de8732b datapathConfiguration="&{false false false false false }" interface=lxc635372083c05 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zsnlf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e363927b6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3932 ipv4=10.0.0.234 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zsnlf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e363927b6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3932 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=51c8beb4-ac72-4b78-a99e-3a75790efcce,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=51c8beb4-ac72-4b78-a99e-3a75790efcce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.234 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zsnlf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e363927b6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3932 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zsnlf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=51c8beb4-ac72-4b78-a99e-3a75790efcce;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=51c8beb4-ac72-4b78-a99e-3a75790efcce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e363927b6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3932 identity=60597 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=51c8beb4-ac72-4b78-a99e-3a75790efcce,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=51c8beb4-ac72-4b78-a99e-3a75790efcce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.234 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zsnlf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e363927b6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3932 identity=60597 ipv4=10.0.0.234 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zsnlf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 395e2b41-edd4-4a3a-8b25-1e416800e79b default }" containerID=578dcfe4d962ddb1f65fcc2bda21574d43ee17de44eedfbb8be732326800f81d datapathConfiguration="&{false false false false false }" interface=lxcac8b6e8d550d k8sPodName=kube-system/coredns-7c96b6546b-ktnff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=578dcfe4d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1674 ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ktnff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=578dcfe4d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1674 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ktnff subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Compiled new BPF template" BPFCompilationTime=1.132761706s file-path=/var/run/cilium/state/templates/46c20db1b50756f2816aacee32b709d6ffdae6adcbbcf92d796df71729d82822/bpf_lxc.o subsys=datapath-loader level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=578dcfe4d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1674 identity=35261 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ktnff oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=578dcfe4d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1674 identity=35261 ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ktnff subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e363927b6c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3932 identity=60597 ipv4=10.0.0.234 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zsnlf subsys=endpoint level=info msg="Successful endpoint creation" containerID=e363927b6c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3932 identity=60597 ipv4=10.0.0.234 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zsnlf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=996 identity=4 ipv4=10.0.0.41 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=578dcfe4d9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1674 identity=35261 ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ktnff subsys=endpoint level=info msg="Successful endpoint creation" containerID=578dcfe4d9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1674 identity=35261 ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ktnff subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e363927b6c endpointID=3932 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-zsnlf subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=51c8beb4-ac72-4b78-a99e-3a75790efcce k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=51c8beb4-ac72-4b78-a99e-3a75790efcce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=e363927b6c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3932 identity=60597 ipv4=10.0.0.234 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zsnlf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 35259296-6b2e-4442-97c2-2789987aa2af default }" containerID=9ff1799961c62084d1a27bf59c071700456dd3e344ac852bc4747848c8c8008c datapathConfiguration="&{false false false false false }" interface=lxc39d9f085ad1b k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sv9xd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ff1799961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 ipv4=10.0.0.157 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sv9xd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ff1799961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.157 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sv9xd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9ff1799961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.157 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sv9xd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ff1799961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 identity=6487 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.157 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sv9xd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ff1799961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 identity=6487 ipv4=10.0.0.157 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sv9xd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ff1799961 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=255 identity=6487 ipv4=10.0.0.157 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sv9xd subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ff1799961 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=255 identity=6487 ipv4=10.0.0.157 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sv9xd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2039 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02039 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02039 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02039 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02039:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2039 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 8288e5ee-99b8-4043-86c7-4a44c7ddf58c default }" containerID=0c77593318b0d3621020ddf2643cfcde896e96ecafb9390295273e177595c62e datapathConfiguration="&{false false false false false }" interface=lxc1b09dcd65267 k8sPodName=kube-system/coredns-67659f764b-fm82f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c77593318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 ipv4=10.0.0.138 ipv6= k8sPodName=kube-system/coredns-67659f764b-fm82f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c77593318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.138 ipv6= k8sPodName=kube-system/coredns-67659f764b-fm82f subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0c77593318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 identity=35261 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.138 ipv6= k8sPodName=kube-system/coredns-67659f764b-fm82f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c77593318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 identity=35261 ipv4=10.0.0.138 ipv6= k8sPodName=kube-system/coredns-67659f764b-fm82f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c77593318 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=642 identity=35261 ipv4=10.0.0.138 ipv6= k8sPodName=kube-system/coredns-67659f764b-fm82f subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c77593318 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=642 identity=35261 ipv4=10.0.0.138 ipv6= k8sPodName=kube-system/coredns-67659f764b-fm82f subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.219 6978b71a-8b0e-45df-a459-a54cde429a07 default }" containerID=9317295814a4c2e36c295205cc0cc228c77b13202cdfaa478f7ca3ff2e98c7ae datapathConfiguration="&{false false false false false }" interface=lxc2caf050c5e24 k8sPodName=kube-system/coredns-67659f764b-7f9fp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9317295814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 ipv4=10.0.0.219 ipv6= k8sPodName=kube-system/coredns-67659f764b-7f9fp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9317295814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.219 ipv6= k8sPodName=kube-system/coredns-67659f764b-7f9fp subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9317295814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identity=35261 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.219 ipv6= k8sPodName=kube-system/coredns-67659f764b-7f9fp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9317295814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identity=35261 ipv4=10.0.0.219 ipv6= k8sPodName=kube-system/coredns-67659f764b-7f9fp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9317295814 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1508 identity=35261 ipv4=10.0.0.219 ipv6= k8sPodName=kube-system/coredns-67659f764b-7f9fp subsys=endpoint level=info msg="Successful endpoint creation" containerID=9317295814 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1508 identity=35261 ipv4=10.0.0.219 ipv6= k8sPodName=kube-system/coredns-67659f764b-7f9fp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.58 7cea0902-f607-4121-bec1-7c109fffcb77 default }" containerID=a963ccd947e1640980f9f6da0cf045afc2d04dffb343f5b8a43764b70fa97f35 datapathConfiguration="&{false false false false false }" interface=lxc139a38527717 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5p7wq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a963ccd947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3749 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5p7wq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a963ccd947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3749 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5p7wq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a963ccd947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3749 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5p7wq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a963ccd947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3749 identity=19592 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5p7wq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a963ccd947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3749 identity=19592 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5p7wq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a963ccd947 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3749 identity=19592 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5p7wq subsys=endpoint level=info msg="Successful endpoint creation" containerID=a963ccd947 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3749 identity=19592 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-5p7wq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=578dcfe4d9 endpointID=1674 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-ktnff subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=578dcfe4d9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1674 identity=35261 ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ktnff subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 fc7aba18-a376-4628-99e0-f0c8678ab3b2 default }" containerID=89e32272beb6aa2d35f696cad5b89f329575dcd183108b2224798b9ce278c991 datapathConfiguration="&{false false false false false }" interface=lxc6afb6a2607a3 k8sPodName=cert-manager/cert-manager-75c4c745bc-n6k67 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89e32272be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1674 ipv4=10.0.0.232 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-n6k67 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89e32272be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1674 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.232 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-n6k67 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=89e32272be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1674 identity=9669 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.232 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-n6k67 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89e32272be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1674 identity=9669 ipv4=10.0.0.232 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-n6k67 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 054bd19e-cebf-4418-bde5-92599fc150da default }" containerID=1dce262f88b843115ff46e179a48ed6bff1555949c0c7f2a5932ed939cc195f4 datapathConfiguration="&{false false false false false }" interface=lxc392f8a1734ec k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cdf64 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1dce262f88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cdf64 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1dce262f88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cdf64 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.71 e46c7132-f17b-4dd2-83ad-5efdc6bc505e default }" containerID=7fac6d8b9c473ad1535d1dbb677c2608148a96004840978c658ebffca7bf1fe4 datapathConfiguration="&{false false false false false }" interface=lxc937fd5ba7e69 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6vkvc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7fac6d8b9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6vkvc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7fac6d8b9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6vkvc subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=1dce262f88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identity=571 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cdf64 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1dce262f88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identity=571 ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cdf64 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7fac6d8b9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=1366 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6vkvc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7fac6d8b9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=1366 ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6vkvc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89e32272be datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1674 identity=9669 ipv4=10.0.0.232 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-n6k67 subsys=endpoint level=info msg="Successful endpoint creation" containerID=89e32272be datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1674 identity=9669 ipv4=10.0.0.232 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-n6k67 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7fac6d8b9c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=50 identity=1366 ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6vkvc subsys=endpoint level=info msg="Successful endpoint creation" containerID=7fac6d8b9c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=50 identity=1366 ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6vkvc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1dce262f88 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=990 identity=571 ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cdf64 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1dce262f88 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=990 identity=571 ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cdf64 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.223 5a345a44-028f-49b3-b15d-390522e8ff65 default }" containerID=a32845c5af5eb997e987874c7589bcfbe0e00fcc5ec768aeeeaf0789f9a0157b datapathConfiguration="&{false false false false false }" interface=lxcb5194ba7b428 k8sPodName=cert-manager/cert-manager-startupapicheck-8fbq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a32845c5af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8fbq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a32845c5af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=a5b5653c-9370-41f3-9313-b0c3b5a10dcb,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=a5b5653c-9370-41f3-9313-b0c3b5a10dcb,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8fbq5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=a5b5653c-9370-41f3-9313-b0c3b5a10dcb;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=a5b5653c-9370-41f3-9313-b0c3b5a10dcb;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a32845c5af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identity=11904 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=a5b5653c-9370-41f3-9313-b0c3b5a10dcb,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=a5b5653c-9370-41f3-9313-b0c3b5a10dcb,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8fbq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a32845c5af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=256 identity=11904 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8fbq5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a32845c5af datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=256 identity=11904 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8fbq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a32845c5af datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=256 identity=11904 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8fbq5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a32845c5af endpointID=256 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-8fbq5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=a5b5653c-9370-41f3-9313-b0c3b5a10dcb k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=a5b5653c-9370-41f3-9313-b0c3b5a10dcb k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=a32845c5af datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=256 identity=11904 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8fbq5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 73fa02f6-8d10-4f99-8073-99122eb2bde3 default }" containerID=84b02eedc9c33bedfed4dd35d496d3daf62e0adef7fcbc631e5717d670984e62 datapathConfiguration="&{false false false false false }" interface=lxc0d0a4b7eac7c k8sPodName=ingress-nginx/ingress-nginx-admission-create-xdsdz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84b02eedc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=494 ipv4=10.0.0.182 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xdsdz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84b02eedc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=494 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b7db11cc-6bb3-493d-94d8-347804c59523,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=b7db11cc-6bb3-493d-94d8-347804c59523,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.182 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xdsdz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=84b02eedc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=494 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.182 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xdsdz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=b7db11cc-6bb3-493d-94d8-347804c59523;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=b7db11cc-6bb3-493d-94d8-347804c59523;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84b02eedc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=494 identity=8655 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b7db11cc-6bb3-493d-94d8-347804c59523,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=b7db11cc-6bb3-493d-94d8-347804c59523,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.182 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xdsdz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84b02eedc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=494 identity=8655 ipv4=10.0.0.182 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xdsdz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=84b02eedc9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=494 identity=8655 ipv4=10.0.0.182 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xdsdz subsys=endpoint level=info msg="Successful endpoint creation" containerID=84b02eedc9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=494 identity=8655 ipv4=10.0.0.182 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xdsdz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=84b02eedc9 endpointID=494 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-xdsdz subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=b7db11cc-6bb3-493d-94d8-347804c59523 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=b7db11cc-6bb3-493d-94d8-347804c59523 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=84b02eedc9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=494 identity=8655 ipv4=10.0.0.182 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xdsdz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 b8619e2b-8883-45f0-a83d-344ad0e0ff9d default }" containerID=a12ba8b6b176131541925f49a712e2bb1f6675cad72bee0af84b5c80b29a8ae8 datapathConfiguration="&{false false false false false }" interface=lxc47bc141d2059 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l6785 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a12ba8b6b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 ipv4=10.0.0.165 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l6785 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a12ba8b6b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.165 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l6785 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a12ba8b6b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.165 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l6785 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a12ba8b6b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identity=40186 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.165 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l6785 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a12ba8b6b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identity=40186 ipv4=10.0.0.165 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l6785 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a12ba8b6b1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=379 identity=40186 ipv4=10.0.0.165 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l6785 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a12ba8b6b1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=379 identity=40186 ipv4=10.0.0.165 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-l6785 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.110 36e55423-e324-4f0e-a105-84b2bf3cd82d default }" containerID=7cd9f9478d0989ec1bf84bf8ad20e131ade4922d97812c6861d66cd1d241bfc6 datapathConfiguration="&{false false false false false }" interface=lxc3ccb23f994b0 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pxk6r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7cd9f9478d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pxk6r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7cd9f9478d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6000f788-57d7-47d2-98b3-756a12db61d8,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=6000f788-57d7-47d2-98b3-756a12db61d8,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pxk6r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=6000f788-57d7-47d2-98b3-756a12db61d8;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=6000f788-57d7-47d2-98b3-756a12db61d8;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7cd9f9478d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identity=2506 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6000f788-57d7-47d2-98b3-756a12db61d8,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=6000f788-57d7-47d2-98b3-756a12db61d8,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pxk6r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7cd9f9478d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identity=2506 ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pxk6r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7cd9f9478d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2417 identity=2506 ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pxk6r subsys=endpoint level=info msg="Successful endpoint creation" containerID=7cd9f9478d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2417 identity=2506 ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pxk6r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7cd9f9478d endpointID=2417 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-pxk6r subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=6000f788-57d7-47d2-98b3-756a12db61d8 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=6000f788-57d7-47d2-98b3-756a12db61d8 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=7cd9f9478d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2417 identity=2506 ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pxk6r subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=43065ea3-c7d0-40c7-bf18-55cd9066a1fd] Description:}]" policyAddRequest=9500b504-5aa0-4856-a27e-817db69a5489 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=9500b504-5aa0-4856-a27e-817db69a5489 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ad0828f4-7928-4a20-809b-f9420f4d1885] Description:}]" policyAddRequest=d1474af8-47c1-4418-9960-21b282ee0dce subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=d1474af8-47c1-4418-9960-21b282ee0dce policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.74 a071a94c-3657-4b53-987c-89ebdd33b3c7 default }" containerID=4a5cbaa3e2756b0b605df0db7dfba90275b51384e41f658feb52fd2269e9f06d datapathConfiguration="&{false false false false false }" interface=lxc81532a955366 k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-pl246 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a5cbaa3e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-pl246 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a5cbaa3e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-pl246 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.8.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a5cbaa3e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identity=573 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-pl246 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a5cbaa3e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identity=573 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-pl246 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a5cbaa3e2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=671 identity=573 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-pl246 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a5cbaa3e2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=671 identity=573 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-pl246 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.159 d09e78c7-7ad3-4148-b5c8-e253dabe7706 default }" containerID=ece53a4f8a92b8c95233265957e76624f891911a16a8da50a871e9cbd738ba3d datapathConfiguration="&{false false false false false }" interface=lxc52a9ed34bd03 k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jk67d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ece53a4f8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jk67d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ece53a4f8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jk67d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.13.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ece53a4f8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 identity=53150 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jk67d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ece53a4f8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 identity=53150 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jk67d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ece53a4f8a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1203 identity=53150 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jk67d subsys=endpoint level=info msg="Successful endpoint creation" containerID=ece53a4f8a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1203 identity=53150 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jk67d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.85 5987b9f9-7d5e-44f4-bca0-04a3b3411c1c default }" containerID=7fbf334a313719d1ea9db183b3a034de266965a871dc7e30ee64f1200ed81c05 datapathConfiguration="&{false false false false false }" interface=lxcb1ee977fe9f3 k8sPodName=openstack/pxc-operator-7cff949c8b-qzz9s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7fbf334a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-qzz9s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7fbf334a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-qzz9s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7fbf334a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identity=33967 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-qzz9s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7fbf334a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identity=33967 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-qzz9s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7fbf334a31 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1110 identity=33967 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-qzz9s subsys=endpoint level=info msg="Successful endpoint creation" containerID=7fbf334a31 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1110 identity=33967 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-qzz9s subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.191 1a52bd9e-e627-4739-a988-4047f094711c default }" containerID=b93cf04b732995ba259ae2137bce0969286eda0c508011f2820339ffb744f528 datapathConfiguration="&{false false false false false }" interface=lxc1c64648135da k8sPodName=local-path-storage/helper-pod-create-pvc-0ffcee9e-73c3-4a63-bee8-a0330b1cc8ec labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b93cf04b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ffcee9e-73c3-4a63-bee8-a0330b1cc8ec subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b93cf04b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ffcee9e-73c3-4a63-bee8-a0330b1cc8ec subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b93cf04b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ffcee9e-73c3-4a63-bee8-a0330b1cc8ec line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b93cf04b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identity=36007 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ffcee9e-73c3-4a63-bee8-a0330b1cc8ec oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b93cf04b73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identity=36007 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ffcee9e-73c3-4a63-bee8-a0330b1cc8ec subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b93cf04b73 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=329 identity=36007 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ffcee9e-73c3-4a63-bee8-a0330b1cc8ec subsys=endpoint level=info msg="Successful endpoint creation" containerID=b93cf04b73 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=329 identity=36007 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ffcee9e-73c3-4a63-bee8-a0330b1cc8ec subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.5 6e50d22c-64d7-4f32-9cc4-7142620f3a9a default }" containerID=bfcd0b67774cb6c8ce424af92ea189cb1d716d22379731bc6e79b82d35907c80 datapathConfiguration="&{false false false false false }" interface=lxc7ae213bf7ddf k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfcd0b6777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1491 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfcd0b6777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1491 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfcd0b6777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1491 identity=4856 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bfcd0b6777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1491 identity=4856 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bfcd0b6777 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1491 identity=4856 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfcd0b6777 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1491 identity=4856 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b93cf04b73 endpointID=329 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0ffcee9e-73c3-4a63-bee8-a0330b1cc8ec subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b93cf04b73 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=329 identity=36007 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0ffcee9e-73c3-4a63-bee8-a0330b1cc8ec subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 5e33da00-ab70-4371-9e8d-dbcf74d52545 default }" containerID=69c93da065c3f30ac7066e5059091cdc6bc151b349b4e097eb9101fef8d9581f datapathConfiguration="&{false false false false false }" interface=lxcaa3c002cec16 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69c93da065 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69c93da065 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69c93da065 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 identity=26640 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69c93da065 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 identity=26640 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=69c93da065 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1649 identity=26640 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=69c93da065 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1649 identity=26640 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.002908274378779066 newInterval=7m30s subsys=map-ct level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=1f90a8ed-06f1-4882-aacd-982f3b92d641] Description:}]" policyAddRequest=c35885b8-3b94-44b5-8fb8-16784cafcd3c subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=c35885b8-3b94-44b5-8fb8-16784cafcd3c policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.17 25a9c2a9-b500-494a-a57e-442839e8a8a2 default }" containerID=3bade8f382b3d098cda32b173f9e239380463b97319f38de95a2f76ed2f76bc7 datapathConfiguration="&{false false false false false }" interface=lxcb0cf328df652 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bade8f382 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 ipv4=10.0.0.17 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bade8f382 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.17 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=23.0.7;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-20.0.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bade8f382 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identity=1382 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.17 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bade8f382 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identity=1382 ipv4=10.0.0.17 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3bade8f382 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4 identity=1382 ipv4=10.0.0.17 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bade8f382 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4 identity=1382 ipv4=10.0.0.17 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.248 370572dc-0196-4398-9aca-053cd5fe4249 default }" containerID=671fdce4538b56d0f6186f8d713b4739e1ad06575c4136e9050aaf08730e4c64 datapathConfiguration="&{false false false false false }" interface=lxc73c13be66208 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cj25r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=671fdce453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cj25r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=671fdce453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cj25r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=671fdce453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=4351 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cj25r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=671fdce453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=4351 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cj25r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.12 7f3dd0d4-ad16-4681-896b-eae6420e0bae default }" containerID=8d5b85d87ac89dcfe8f04bb12b4f0c7d97ce11e65225e4acb8170ced491f5081 datapathConfiguration="&{false false false false false }" interface=lxcd35a2a7cad6d k8sPodName=monitoring/node-feature-discovery-worker-xgbjs labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.30 a13d8ab9-ca00-4611-b7e4-b8fc7db05683 default }" containerID=008d552e477b86bb628f7fac4fc252407bbdcc9dfd747be4e535fcbc9d5c78d1 datapathConfiguration="&{false false false false false }" interface=lxcb02be7e0da24 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zktg6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d5b85d87a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xgbjs subsys=endpoint level=info msg="New endpoint" containerID=008d552e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zktg6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d5b85d87a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xgbjs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=008d552e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zktg6 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d5b85d87a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 identity=35028 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xgbjs oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=8d5b85d87a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 identity=35028 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xgbjs subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=008d552e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 identity=21289 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zktg6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=008d552e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 identity=21289 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zktg6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=671fdce453 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=678 identity=4351 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cj25r subsys=endpoint level=info msg="Successful endpoint creation" containerID=671fdce453 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=678 identity=4351 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cj25r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8d5b85d87a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2730 identity=35028 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xgbjs subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d5b85d87a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2730 identity=35028 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xgbjs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=008d552e47 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3682 identity=21289 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zktg6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=008d552e47 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3682 identity=21289 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zktg6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.33 b3e21f88-a24f-4325-86b5-1979947bab2b default }" containerID=235b166e5de7e0d5943d5f6a7c568dba6dd92899b8f2077b338090e16c65e851 datapathConfiguration="&{false false false false false }" interface=lxcbc1e44a302be k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8fpcm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=235b166e5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 ipv4=10.0.0.33 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8fpcm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=235b166e5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.33 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8fpcm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=235b166e5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 identity=9489 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.33 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8fpcm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=235b166e5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 identity=9489 ipv4=10.0.0.33 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8fpcm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=235b166e5d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=954 identity=9489 ipv4=10.0.0.33 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8fpcm subsys=endpoint level=info msg="Successful endpoint creation" containerID=235b166e5d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=954 identity=9489 ipv4=10.0.0.33 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8fpcm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2039 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02039 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02039 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02039 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02039:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2039 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 76247dd6-a7e8-4dce-9d90-d86b85ebaa65 default }" containerID=dce0327287c02e83230265b1aaa889f6f7ab2f04ed51c6d2dfa95131039b85eb datapathConfiguration="&{false false false false false }" interface=lxcb56af585432b k8sPodName=monitoring/kube-prometheus-stack-admission-create-77kk7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dce0327287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3470 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-77kk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dce0327287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3470 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=56b9e69f-7745-4e4a-901a-bd5849dd4ed6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=56b9e69f-7745-4e4a-901a-bd5849dd4ed6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-77kk7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=56b9e69f-7745-4e4a-901a-bd5849dd4ed6;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=56b9e69f-7745-4e4a-901a-bd5849dd4ed6;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dce0327287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3470 identity=56625 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=56b9e69f-7745-4e4a-901a-bd5849dd4ed6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=56b9e69f-7745-4e4a-901a-bd5849dd4ed6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-77kk7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dce0327287 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3470 identity=56625 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-77kk7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dce0327287 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3470 identity=56625 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-77kk7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dce0327287 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3470 identity=56625 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-77kk7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dce0327287 endpointID=3470 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-77kk7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=56b9e69f-7745-4e4a-901a-bd5849dd4ed6 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=56b9e69f-7745-4e4a-901a-bd5849dd4ed6 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=dce0327287 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3470 identity=56625 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-77kk7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 4a4fd4bd-cc35-4372-a305-2a8920a7850e default }" containerID=8c2871703b3acb6155df97d4b3aa00c3ed65db18e55056031373c558f3c69d6a datapathConfiguration="&{false false false false false }" interface=lxced0e20346fad k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-477r7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c2871703b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1581 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-477r7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c2871703b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1581 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-477r7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c2871703b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1581 identity=2599 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-477r7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c2871703b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1581 identity=2599 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-477r7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 7dfb58f2-c9b9-433b-8008-2728210eb45e default }" containerID=8c40fa533b49e3bd53433b85cf6716b7d571e0bdf7256bacf7e9844689a9845d datapathConfiguration="&{false false false false false }" interface=lxc8e270ae7a4d8 k8sPodName=monitoring/kube-prometheus-stack-grafana-74b5ff9b59-fshsz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c40fa533b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-74b5ff9b59-fshsz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c40fa533b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-74b5ff9b59-fshsz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c40fa533b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identity=21010 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-74b5ff9b59-fshsz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c40fa533b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identity=21010 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-74b5ff9b59-fshsz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c2871703b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1581 identity=2599 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-477r7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c2871703b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1581 identity=2599 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-477r7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.59 83385ff1-c701-408c-9fae-77e232ffff77 default }" containerID=80ae66795a55dd4f417d609d88eb8c3bf38a2e98021da19b6992de08020d02d7 datapathConfiguration="&{false false false false false }" interface=lxc24c08991a6c3 k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-r659m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80ae66795a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-r659m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80ae66795a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-r659m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:chart=kube-prometheus-stack-58.2.1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80ae66795a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identity=14548 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-r659m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80ae66795a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identity=14548 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-r659m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c40fa533b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=547 identity=21010 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-74b5ff9b59-fshsz subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c40fa533b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=547 identity=21010 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-74b5ff9b59-fshsz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=80ae66795a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1916 identity=14548 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-r659m subsys=endpoint level=info msg="Successful endpoint creation" containerID=80ae66795a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1916 identity=14548 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-r659m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.3 79108f00-8049-47eb-aca6-0fa8563d8416 default }" containerID=d7ec7d1326a6f5bda70a6d15af7d402212e678f4d3103c83a4b2bb0f1e0db8f2 datapathConfiguration="&{false false false false false }" interface=lxc460e68d80be1 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-pp9fw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7ec7d1326 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=441 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-pp9fw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7ec7d1326 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=441 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=efa43698-a37b-49a4-ad2e-14e5e1e895eb,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=efa43698-a37b-49a4-ad2e-14e5e1e895eb,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-pp9fw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=efa43698-a37b-49a4-ad2e-14e5e1e895eb;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=efa43698-a37b-49a4-ad2e-14e5e1e895eb;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7ec7d1326 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=441 identity=47325 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=efa43698-a37b-49a4-ad2e-14e5e1e895eb,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=efa43698-a37b-49a4-ad2e-14e5e1e895eb,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-pp9fw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7ec7d1326 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=441 identity=47325 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-pp9fw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7ec7d1326 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=441 identity=47325 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-pp9fw subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7ec7d1326 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=441 identity=47325 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-pp9fw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d7ec7d1326 endpointID=441 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-pp9fw subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=efa43698-a37b-49a4-ad2e-14e5e1e895eb k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=efa43698-a37b-49a4-ad2e-14e5e1e895eb k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=d7ec7d1326 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=441 identity=47325 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-pp9fw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 9e7e6c90-07ec-4c5f-a248-f26fddb982bb default }" containerID=4551bf1a4c0e3a9879e5cc70a9fd1b257af0c20c49f35eac32b0c62ebf233a63 datapathConfiguration="&{false false false false false }" interface=lxcf2290d0cc62d k8sPodName=local-path-storage/helper-pod-create-pvc-cb1784a5-e7e1-4d7f-b463-5ce56208c548 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4551bf1a4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2324 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb1784a5-e7e1-4d7f-b463-5ce56208c548 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4551bf1a4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2324 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb1784a5-e7e1-4d7f-b463-5ce56208c548 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4551bf1a4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2324 identity=36007 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb1784a5-e7e1-4d7f-b463-5ce56208c548 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4551bf1a4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2324 identity=36007 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb1784a5-e7e1-4d7f-b463-5ce56208c548 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4551bf1a4c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2324 identity=36007 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb1784a5-e7e1-4d7f-b463-5ce56208c548 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4551bf1a4c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2324 identity=36007 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb1784a5-e7e1-4d7f-b463-5ce56208c548 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.27 83a6d903-52ff-4337-917a-5f2486c8a5a5 default }" containerID=44d0a30707bcae77e17b44946d14327a1fd7379d1147b3ad311da4a03f785e7b datapathConfiguration="&{false false false false false }" interface=lxcba3533ed0cde k8sPodName=local-path-storage/helper-pod-create-pvc-f66dd147-3743-4101-8724-a7a28d3cd3a3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44d0a30707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1435 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f66dd147-3743-4101-8724-a7a28d3cd3a3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44d0a30707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1435 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f66dd147-3743-4101-8724-a7a28d3cd3a3 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=44d0a30707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1435 identity=36007 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f66dd147-3743-4101-8724-a7a28d3cd3a3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44d0a30707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1435 identity=36007 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f66dd147-3743-4101-8724-a7a28d3cd3a3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44d0a30707 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1435 identity=36007 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f66dd147-3743-4101-8724-a7a28d3cd3a3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=44d0a30707 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1435 identity=36007 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f66dd147-3743-4101-8724-a7a28d3cd3a3 subsys=daemon level=info msg="Delete endpoint request" containerID=4551bf1a4c endpointID=2324 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-cb1784a5-e7e1-4d7f-b463-5ce56208c548 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4551bf1a4c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2324 identity=36007 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb1784a5-e7e1-4d7f-b463-5ce56208c548 subsys=endpoint level=info msg="Delete endpoint request" containerID=44d0a30707 endpointID=1435 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f66dd147-3743-4101-8724-a7a28d3cd3a3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=44d0a30707 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1435 identity=36007 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f66dd147-3743-4101-8724-a7a28d3cd3a3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 2ee2bf3f-21cf-4984-9f9b-3d2f810db92c default }" containerID=3d4ccd6f7e26d91d63ea90ec62ea2f29d019c789be00ffb9aa0184c44a9a07e2 datapathConfiguration="&{false false false false false }" interface=lxc8fa69295fbfa k8sPodName=monitoring/loki-gateway-748b556d75-h54s7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d4ccd6f7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-h54s7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d4ccd6f7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-h54s7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3d4ccd6f7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-h54s7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d4ccd6f7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 identity=64366 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-h54s7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d4ccd6f7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 identity=64366 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-h54s7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d4ccd6f7e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=396 identity=64366 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-h54s7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d4ccd6f7e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=396 identity=64366 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-h54s7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.242 6ead0189-0a94-42ad-9e2f-aaa407e74505 default }" containerID=bc2f44a3e0d1b5be197c74ce16184cdaa249e3d5a906f49e4a960e2838d02b3f datapathConfiguration="&{false false false false false }" interface=lxc94aec6ac01c6 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc2f44a3e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3477 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc2f44a3e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3477 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc2f44a3e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3477 identity=679 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc2f44a3e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3477 identity=679 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 56efa4ab-db40-4ac8-89c6-587ac86feb39 default }" containerID=2edba0b90112acd116b9f955a3966b22d4c4cbaf5c768a88b87e0842e34a27e3 datapathConfiguration="&{false false false false false }" interface=lxce4dce916994b k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2edba0b901 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=936 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 425a79b4-aca0-48bc-a23e-6e66ca2a8ecd default }" containerID=a5be7156f5d3abba44d1582b47c07f4285cae9de5faf3a016eb36ff1fd9ef872 datapathConfiguration="&{false false false false false }" interface=lxce5f73f8ee974 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=2edba0b901 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=936 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=a5be7156f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5be7156f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2edba0b901 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=936 identity=60958 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=2edba0b901 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=936 identity=60958 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5be7156f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identity=20874 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5be7156f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identity=20874 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc2f44a3e0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3477 identity=679 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc2f44a3e0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3477 identity=679 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.44 86f85610-6a8a-4670-8347-0a623ef321b6 default }" containerID=3a4f73a017795a35876fe6b51f64db1a3451e50fb6d3885ff3d05a2f4bdc8af2 datapathConfiguration="&{false false false false false }" interface=lxc822dd8efc37b k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a4f73a017 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4061 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a4f73a017 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4061 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=2edba0b901 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=936 identity=60958 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2edba0b901 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=936 identity=60958 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a5be7156f5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=202 identity=20874 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5be7156f5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=202 identity=20874 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a4f73a017 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4061 identity=7884 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a4f73a017 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4061 identity=7884 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a4f73a017 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4061 identity=7884 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a4f73a017 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4061 identity=7884 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.245 b845823b-aa3a-42e8-89c6-a8c1954024ea default }" containerID=b7702809f390a3cda25f9603fe951fd98e8a7f337b7c3038517532f57a6179db datapathConfiguration="&{false false false false false }" interface=lxcedc1b38fc3c3 k8sPodName=local-path-storage/helper-pod-create-pvc-b0faa951-8312-487b-8135-1e288bca0514 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7702809f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b0faa951-8312-487b-8135-1e288bca0514 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7702809f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b0faa951-8312-487b-8135-1e288bca0514 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7702809f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 identity=36007 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b0faa951-8312-487b-8135-1e288bca0514 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7702809f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 identity=36007 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b0faa951-8312-487b-8135-1e288bca0514 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7702809f3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1501 identity=36007 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b0faa951-8312-487b-8135-1e288bca0514 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7702809f3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1501 identity=36007 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b0faa951-8312-487b-8135-1e288bca0514 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.182 c55977f5-69f5-4cbf-8026-505af40a0c99 default }" containerID=b126704cf9a266600d7d2fd8787f62e7e3953e1a9a176d4743a9c0febee3b6ac datapathConfiguration="&{false false false false false }" interface=lxcca17113414d2 k8sPodName=monitoring/vector-54288 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b126704cf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/vector-54288 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b126704cf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/vector-54288 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b126704cf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=18988 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/vector-54288 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b126704cf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=18988 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/vector-54288 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b126704cf9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=297 identity=18988 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/vector-54288 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b126704cf9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=297 identity=18988 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/vector-54288 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b7702809f3 endpointID=1501 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b0faa951-8312-487b-8135-1e288bca0514 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b7702809f3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1501 identity=36007 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b0faa951-8312-487b-8135-1e288bca0514 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 7cd9c83d-5d5b-48ae-b272-a485140f97e3 default }" containerID=fb2f03a1ccdf5e0b20983e1b8cafbbb649b9326172f6141bad531502478da8da datapathConfiguration="&{false false false false false }" interface=lxcd6c65b8cd2b3 k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-bq9rz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb2f03a1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-bq9rz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb2f03a1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-bq9rz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fb2f03a1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-bq9rz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.12.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb2f03a1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 identity=39258 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-bq9rz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb2f03a1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 identity=39258 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-bq9rz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 f8209604-d24c-4441-a8f7-a36585a3c74a default }" containerID=e3a39aecd15915ed36fa282f1b1a21c15093c224f73e9c722afa47f3729931e3 datapathConfiguration="&{false false false false false }" interface=lxc6b6edb3f8040 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3a39aecd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2131 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3a39aecd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2131 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3a39aecd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2131 identity=15794 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3a39aecd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2131 identity=15794 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb2f03a1cc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1114 identity=39258 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-bq9rz subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb2f03a1cc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1114 identity=39258 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-bq9rz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e3a39aecd1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2131 identity=15794 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3a39aecd1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2131 identity=15794 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.217 004131f4-b021-4d94-8d1d-b76092d1f421 default }" containerID=04cb6459fe6480f2851391514cca356a2f128a24a397b2f87b15a9a39950992d datapathConfiguration="&{false false false false false }" interface=lxc18043f8c9886 k8sPodName=openstack/memcached-memcached-6479589586-r989k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04cb6459fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-r989k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04cb6459fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-r989k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=04cb6459fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.217 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-r989k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04cb6459fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identity=39082 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-r989k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04cb6459fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identity=39082 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-r989k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=04cb6459fe datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=852 identity=39082 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-r989k subsys=endpoint level=info msg="Successful endpoint creation" containerID=04cb6459fe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=852 identity=39082 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-r989k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.153 e4b33c5a-0b65-4028-b8e2-b4b9e16acc09 default }" containerID=da5048f6132ccfe406f6020fccdcdb09242676881140e0321b688c7b7bee78ad datapathConfiguration="&{false false false false false }" interface=lxc0f367ba776b1 k8sPodName=local-path-storage/helper-pod-create-pvc-e45003e8-9437-43d9-9761-c1a89088f18d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da5048f613 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2020 ipv4=10.0.0.153 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e45003e8-9437-43d9-9761-c1a89088f18d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da5048f613 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2020 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.153 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e45003e8-9437-43d9-9761-c1a89088f18d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da5048f613 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2020 identity=36007 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.153 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e45003e8-9437-43d9-9761-c1a89088f18d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da5048f613 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2020 identity=36007 ipv4=10.0.0.153 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e45003e8-9437-43d9-9761-c1a89088f18d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da5048f613 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2020 identity=36007 ipv4=10.0.0.153 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e45003e8-9437-43d9-9761-c1a89088f18d subsys=endpoint level=info msg="Successful endpoint creation" containerID=da5048f613 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2020 identity=36007 ipv4=10.0.0.153 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e45003e8-9437-43d9-9761-c1a89088f18d subsys=daemon level=info msg="Delete endpoint request" containerID=da5048f613 endpointID=2020 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e45003e8-9437-43d9-9761-c1a89088f18d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=da5048f613 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2020 identity=36007 ipv4=10.0.0.153 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e45003e8-9437-43d9-9761-c1a89088f18d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 16b49b7d-851d-41d9-9f42-eba56cd380dd default }" containerID=72e28e2303ff27092fec16ec571529cb048971c70b9910b5fcc9ed2243bd67a7 datapathConfiguration="&{false false false false false }" interface=lxc27779b55b071 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72e28e2303 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3839 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72e28e2303 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3839 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72e28e2303 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3839 identity=4447 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=72e28e2303 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3839 identity=4447 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72e28e2303 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3839 identity=4447 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=72e28e2303 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3839 identity=4447 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.65 95a4a789-38a3-40f7-9854-c97048b843f6 default }" containerID=17a1b564c99708157afb9eb92ddf04e6c02b94a7caa6e33260c8e674daa060f7 datapathConfiguration="&{false false false false false }" interface=lxcbd38529e2a3c k8sPodName=openstack/keystone-api-58c4f47568-28psb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17a1b564c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3438 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-api-58c4f47568-28psb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17a1b564c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3438 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-api-58c4f47568-28psb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=17a1b564c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3438 identity=54441 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-api-58c4f47568-28psb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17a1b564c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3438 identity=54441 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-api-58c4f47568-28psb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.161 6c030118-8123-4d51-ad90-764e996dde95 default }" containerID=b661bd8a7945d0e9485692527186f4efe10c9383275fbac67f32c135528f238d datapathConfiguration="&{false false false false false }" interface=lxc741ae160744b k8sPodName=openstack/keystone-credential-setup-lzh5m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b661bd8a79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3470 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-credential-setup-lzh5m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b661bd8a79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3470 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d734eeb6-c956-45b1-bb85-cb1933b7b631,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=d734eeb6-c956-45b1-bb85-cb1933b7b631,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-credential-setup-lzh5m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=17a1b564c9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3438 identity=54441 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-api-58c4f47568-28psb subsys=endpoint level=info msg="Successful endpoint creation" containerID=17a1b564c9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3438 identity=54441 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-api-58c4f47568-28psb subsys=daemon level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d734eeb6-c956-45b1-bb85-cb1933b7b631;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=d734eeb6-c956-45b1-bb85-cb1933b7b631;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b661bd8a79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3470 identity=28555 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d734eeb6-c956-45b1-bb85-cb1933b7b631,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=d734eeb6-c956-45b1-bb85-cb1933b7b631,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-credential-setup-lzh5m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b661bd8a79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3470 identity=28555 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-credential-setup-lzh5m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b661bd8a79 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3470 identity=28555 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-credential-setup-lzh5m subsys=endpoint level=info msg="Successful endpoint creation" containerID=b661bd8a79 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3470 identity=28555 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-credential-setup-lzh5m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b661bd8a79 endpointID=3470 k8sNamespace=openstack k8sPodName=keystone-credential-setup-lzh5m subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d734eeb6-c956-45b1-bb85-cb1933b7b631 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=d734eeb6-c956-45b1-bb85-cb1933b7b631 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b661bd8a79 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3470 identity=28555 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-credential-setup-lzh5m subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.031537868437783216 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.18 fbd38a5d-eaa4-4bd1-b39f-3c4bf6c9fefa default }" containerID=6c282cc6e4ca4adb34939a1fdf57158b936a1b52d476fd97883a1a879a552b08 datapathConfiguration="&{false false false false false }" interface=lxc91b0f86b7cfe k8sPodName=openstack/keystone-db-init-jhtqt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c282cc6e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-db-init-jhtqt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c282cc6e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=62b6c435-0355-4727-a9aa-d8fe79ca6e70,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=62b6c435-0355-4727-a9aa-d8fe79ca6e70,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-db-init-jhtqt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=62b6c435-0355-4727-a9aa-d8fe79ca6e70;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=62b6c435-0355-4727-a9aa-d8fe79ca6e70;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c282cc6e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identity=2806 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=62b6c435-0355-4727-a9aa-d8fe79ca6e70,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=62b6c435-0355-4727-a9aa-d8fe79ca6e70,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-db-init-jhtqt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c282cc6e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identity=2806 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-db-init-jhtqt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c282cc6e4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=501 identity=2806 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-db-init-jhtqt subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c282cc6e4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=501 identity=2806 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-db-init-jhtqt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6c282cc6e4 endpointID=501 k8sNamespace=openstack k8sPodName=keystone-db-init-jhtqt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=62b6c435-0355-4727-a9aa-d8fe79ca6e70 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=62b6c435-0355-4727-a9aa-d8fe79ca6e70 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6c282cc6e4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=501 identity=2806 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-db-init-jhtqt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 ae84a11b-e66b-46b9-b693-8c815913939e default }" containerID=29717ec940a287998ca4305c8f714e49fc234dc3087fbf6486c807acef44fc03 datapathConfiguration="&{false false false false false }" interface=lxcf7fa2eef60bb k8sPodName=openstack/keystone-fernet-setup-2dsm4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29717ec940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-fernet-setup-2dsm4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29717ec940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=872ed4bb-e433-4f1e-b576-d06d877541af,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=872ed4bb-e433-4f1e-b576-d06d877541af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-fernet-setup-2dsm4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=872ed4bb-e433-4f1e-b576-d06d877541af;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=872ed4bb-e433-4f1e-b576-d06d877541af;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29717ec940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identity=2876 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=872ed4bb-e433-4f1e-b576-d06d877541af,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=872ed4bb-e433-4f1e-b576-d06d877541af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-fernet-setup-2dsm4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29717ec940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identity=2876 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-fernet-setup-2dsm4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=29717ec940 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1533 identity=2876 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-fernet-setup-2dsm4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=29717ec940 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1533 identity=2876 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-fernet-setup-2dsm4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=29717ec940 endpointID=1533 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-2dsm4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=872ed4bb-e433-4f1e-b576-d06d877541af k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=872ed4bb-e433-4f1e-b576-d06d877541af k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=29717ec940 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1533 identity=2876 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-fernet-setup-2dsm4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 1e4f6338-9065-42b3-8ffc-9009cb6f21aa default }" containerID=abbd0379711da5fd7a0382539426ba01a41e4d80897c9706fa4d2ff548ec19ed datapathConfiguration="&{false false false false false }" interface=lxcd20fb4198aea k8sPodName=openstack/keystone-db-sync-thd24 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abbd037971 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-db-sync-thd24 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abbd037971 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0fe2392a-7daf-415c-81bf-a9f9d44d7d8d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=0fe2392a-7daf-415c-81bf-a9f9d44d7d8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-db-sync-thd24 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0fe2392a-7daf-415c-81bf-a9f9d44d7d8d;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=0fe2392a-7daf-415c-81bf-a9f9d44d7d8d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abbd037971 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identity=3409 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0fe2392a-7daf-415c-81bf-a9f9d44d7d8d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=0fe2392a-7daf-415c-81bf-a9f9d44d7d8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-db-sync-thd24 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=abbd037971 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identity=3409 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-db-sync-thd24 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=abbd037971 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=997 identity=3409 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-db-sync-thd24 subsys=endpoint level=info msg="Successful endpoint creation" containerID=abbd037971 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=997 identity=3409 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-db-sync-thd24 subsys=daemon level=info msg="Delete endpoint request" containerID=abbd037971 endpointID=997 k8sNamespace=openstack k8sPodName=keystone-db-sync-thd24 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0fe2392a-7daf-415c-81bf-a9f9d44d7d8d k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=0fe2392a-7daf-415c-81bf-a9f9d44d7d8d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=abbd037971 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=997 identity=3409 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/keystone-db-sync-thd24 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 8e2ceb3d-8da6-4dea-9f07-a77685dd8673 default }" containerID=34696e21bccd0726b0ad0e48de8e075beac8a76d5a53d19dd25b5859256c5366 datapathConfiguration="&{false false false false false }" interface=lxc0d16de9eeb71 k8sPodName=openstack/keystone-rabbit-init-8gnfz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34696e21bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-rabbit-init-8gnfz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34696e21bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=18d64221-c084-4f58-ae77-6daf76435566,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=18d64221-c084-4f58-ae77-6daf76435566,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-rabbit-init-8gnfz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=18d64221-c084-4f58-ae77-6daf76435566;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=18d64221-c084-4f58-ae77-6daf76435566;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34696e21bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identity=19928 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=18d64221-c084-4f58-ae77-6daf76435566,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=18d64221-c084-4f58-ae77-6daf76435566,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-rabbit-init-8gnfz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34696e21bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identity=19928 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-rabbit-init-8gnfz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=34696e21bc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=167 identity=19928 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-rabbit-init-8gnfz subsys=endpoint level=info msg="Successful endpoint creation" containerID=34696e21bc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=167 identity=19928 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-rabbit-init-8gnfz subsys=daemon level=info msg="Delete endpoint request" containerID=34696e21bc endpointID=167 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-8gnfz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=18d64221-c084-4f58-ae77-6daf76435566 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=18d64221-c084-4f58-ae77-6daf76435566 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=34696e21bc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=167 identity=19928 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-rabbit-init-8gnfz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 893e9b71-1630-4d0b-9d2c-4062c69c8e88 default }" containerID=d678829fed364db36114d5e459bb9181127bbe54065ac4580b17b6cd71f81973 datapathConfiguration="&{false false false false false }" interface=lxcf1596070d0e6 k8sPodName=openstack/keystone-domain-manage-7d7bs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d678829fed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-7d7bs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d678829fed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b2d141bf-84a6-4908-9dcb-3b50f21d53b9,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=b2d141bf-84a6-4908-9dcb-3b50f21d53b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-7d7bs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b2d141bf-84a6-4908-9dcb-3b50f21d53b9;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=b2d141bf-84a6-4908-9dcb-3b50f21d53b9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d678829fed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identity=2544 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b2d141bf-84a6-4908-9dcb-3b50f21d53b9,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=b2d141bf-84a6-4908-9dcb-3b50f21d53b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-7d7bs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d678829fed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identity=2544 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-7d7bs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d678829fed datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1163 identity=2544 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-7d7bs subsys=endpoint level=info msg="Successful endpoint creation" containerID=d678829fed datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1163 identity=2544 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-7d7bs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d678829fed endpointID=1163 k8sNamespace=openstack k8sPodName=keystone-domain-manage-7d7bs subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b2d141bf-84a6-4908-9dcb-3b50f21d53b9 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=b2d141bf-84a6-4908-9dcb-3b50f21d53b9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d678829fed datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1163 identity=2544 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-domain-manage-7d7bs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 ab454e57-e08f-4b02-aaf7-c56b95de5cb7 default }" containerID=6fa9264e0d9d9efe17d2676d23d5739ee1d814f45cee938d4bd53960d57a17db datapathConfiguration="&{false false false false false }" interface=lxca9c462d3b81e k8sPodName=openstack/keystone-bootstrap-5s9ld labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fa9264e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-5s9ld subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fa9264e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bd8eecfd-8b55-435a-a0f3-80c4f098ba11,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=bd8eecfd-8b55-435a-a0f3-80c4f098ba11,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-5s9ld subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bd8eecfd-8b55-435a-a0f3-80c4f098ba11;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=bd8eecfd-8b55-435a-a0f3-80c4f098ba11;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fa9264e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identity=11547 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bd8eecfd-8b55-435a-a0f3-80c4f098ba11,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=bd8eecfd-8b55-435a-a0f3-80c4f098ba11,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-5s9ld oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6fa9264e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identity=11547 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-5s9ld subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6fa9264e0d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2936 identity=11547 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-5s9ld subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fa9264e0d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2936 identity=11547 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-5s9ld subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6fa9264e0d endpointID=2936 k8sNamespace=openstack k8sPodName=keystone-bootstrap-5s9ld subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bd8eecfd-8b55-435a-a0f3-80c4f098ba11 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=bd8eecfd-8b55-435a-a0f3-80c4f098ba11 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6fa9264e0d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2936 identity=11547 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-5s9ld subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 e7457452-86cf-4dc6-8b41-aeab9830f657 default }" containerID=a6d395b96897da57fb1d1c26d4b32ae71abd8addde6c3d3ebeea1889c344f08f datapathConfiguration="&{false false false false false }" interface=lxcf7e0e2ac87f2 k8sPodName=local-path-storage/helper-pod-create-pvc-7032511c-5a91-4af0-bb18-df7bd8d46805 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6d395b968 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3678 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7032511c-5a91-4af0-bb18-df7bd8d46805 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6d395b968 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3678 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7032511c-5a91-4af0-bb18-df7bd8d46805 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6d395b968 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3678 identity=36007 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7032511c-5a91-4af0-bb18-df7bd8d46805 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6d395b968 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3678 identity=36007 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7032511c-5a91-4af0-bb18-df7bd8d46805 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6d395b968 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3678 identity=36007 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7032511c-5a91-4af0-bb18-df7bd8d46805 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6d395b968 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3678 identity=36007 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7032511c-5a91-4af0-bb18-df7bd8d46805 subsys=daemon level=info msg="Delete endpoint request" containerID=a6d395b968 endpointID=3678 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7032511c-5a91-4af0-bb18-df7bd8d46805 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a6d395b968 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3678 identity=36007 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7032511c-5a91-4af0-bb18-df7bd8d46805 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 130c3afb-df28-47eb-90ee-8ccb35605d5b default }" containerID=0b8c33cac3b298a61b495e6f2bb23aceefe33e5fa57b7650904d9c1866154222 datapathConfiguration="&{false false false false false }" interface=lxc1b9ab2e368e2 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b8c33cac3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b8c33cac3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0b8c33cac3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 identity=36031 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b8c33cac3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 identity=36031 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b8c33cac3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1084 identity=36031 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b8c33cac3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1084 identity=36031 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.124 bf3897d3-b553-42ac-818e-325f4ceab83a default }" containerID=e5015a72eaf50cc2512ec8f77f584613afae4c1e407866ee1049552c9ac3033b datapathConfiguration="&{false false false false false }" interface=lxc0ec3bf67a5c7 k8sPodName=openstack/barbican-api-5ddcd5ccf-p4p7z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5015a72ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-api-5ddcd5ccf-p4p7z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5015a72ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-api-5ddcd5ccf-p4p7z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5015a72ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identity=13118 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-api-5ddcd5ccf-p4p7z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5015a72ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identity=13118 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-api-5ddcd5ccf-p4p7z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.95 193ccb62-7221-455b-81ae-5cb0cfc76a37 default }" containerID=df6881889546642ebfec8ef9801d2ddd0cc3238a35499ce7091cdd55a37c5e4f datapathConfiguration="&{false false false false false }" interface=lxcb1a510583181 k8sPodName=openstack/barbican-db-init-mw9pg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df68818895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-init-mw9pg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df68818895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a738c2d8-7356-4180-9518-9a24753dce7c,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a738c2d8-7356-4180-9518-9a24753dce7c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-init-mw9pg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a738c2d8-7356-4180-9518-9a24753dce7c;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=a738c2d8-7356-4180-9518-9a24753dce7c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df68818895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 identity=28318 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a738c2d8-7356-4180-9518-9a24753dce7c,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a738c2d8-7356-4180-9518-9a24753dce7c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-init-mw9pg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df68818895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 identity=28318 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-init-mw9pg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e5015a72ea datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1085 identity=13118 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-api-5ddcd5ccf-p4p7z subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5015a72ea datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1085 identity=13118 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-api-5ddcd5ccf-p4p7z subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=df68818895 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=835 identity=28318 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-init-mw9pg subsys=endpoint level=info msg="Successful endpoint creation" containerID=df68818895 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=835 identity=28318 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-init-mw9pg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df68818895 endpointID=835 k8sNamespace=openstack k8sPodName=barbican-db-init-mw9pg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a738c2d8-7356-4180-9518-9a24753dce7c k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=a738c2d8-7356-4180-9518-9a24753dce7c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=df68818895 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=835 identity=28318 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-init-mw9pg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 78526733-0caa-47f4-83bd-f50fe52e8ccf default }" containerID=b8c742b9c0159f3e2b774f8bfc012594587df3cf147b7fed6b6cef7202a9b623 datapathConfiguration="&{false false false false false }" interface=lxc13950dc0d70d k8sPodName=openstack/barbican-db-sync-97p5p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8c742b9c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4020 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-db-sync-97p5p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8c742b9c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4020 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=aa087748-e5bd-48e2-9e56-b29b5310aaa0,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=aa087748-e5bd-48e2-9e56-b29b5310aaa0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-db-sync-97p5p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=aa087748-e5bd-48e2-9e56-b29b5310aaa0;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=aa087748-e5bd-48e2-9e56-b29b5310aaa0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b8c742b9c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4020 identity=39375 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=aa087748-e5bd-48e2-9e56-b29b5310aaa0,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=aa087748-e5bd-48e2-9e56-b29b5310aaa0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-db-sync-97p5p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8c742b9c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4020 identity=39375 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-db-sync-97p5p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8c742b9c0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4020 identity=39375 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-db-sync-97p5p subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8c742b9c0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4020 identity=39375 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-db-sync-97p5p subsys=daemon level=info msg="Delete endpoint request" containerID=b8c742b9c0 endpointID=4020 k8sNamespace=openstack k8sPodName=barbican-db-sync-97p5p subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=aa087748-e5bd-48e2-9e56-b29b5310aaa0 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=aa087748-e5bd-48e2-9e56-b29b5310aaa0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b8c742b9c0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4020 identity=39375 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-db-sync-97p5p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 e9fb9909-66e4-4032-92f2-587aa5c05c8f default }" containerID=26d38a0c5fc1eb3f91c067c41f55e13b4434f0608c2357dd3df22cf370b6c234 datapathConfiguration="&{false false false false false }" interface=lxc6abb8bb7c614 k8sPodName=openstack/barbican-rabbit-init-mxwpk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26d38a0c5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-rabbit-init-mxwpk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26d38a0c5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=551e594c-a0d3-47d0-a00d-04064f1341d4,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=551e594c-a0d3-47d0-a00d-04064f1341d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-rabbit-init-mxwpk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=26d38a0c5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-rabbit-init-mxwpk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=551e594c-a0d3-47d0-a00d-04064f1341d4;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=551e594c-a0d3-47d0-a00d-04064f1341d4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26d38a0c5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 identity=2099 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=551e594c-a0d3-47d0-a00d-04064f1341d4,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=551e594c-a0d3-47d0-a00d-04064f1341d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-rabbit-init-mxwpk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26d38a0c5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 identity=2099 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-rabbit-init-mxwpk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26d38a0c5f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=545 identity=2099 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-rabbit-init-mxwpk subsys=endpoint level=info msg="Successful endpoint creation" containerID=26d38a0c5f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=545 identity=2099 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-rabbit-init-mxwpk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=26d38a0c5f endpointID=545 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-mxwpk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=551e594c-a0d3-47d0-a00d-04064f1341d4 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=551e594c-a0d3-47d0-a00d-04064f1341d4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=26d38a0c5f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=545 identity=2099 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/barbican-rabbit-init-mxwpk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 c9f10e4a-04a2-4054-96a3-4f540467cd0e default }" containerID=d63e9eabf313490412dab1c703ff3d8cb565029f65d7a02ef973218ef4c70f2c datapathConfiguration="&{false false false false false }" interface=lxcf2fdefffb519 k8sPodName=openstack/barbican-ks-service-ll8sh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d63e9eabf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2318 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-ks-service-ll8sh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d63e9eabf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2318 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cad79414-3141-41d2-822b-59004e0a7c7f,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=cad79414-3141-41d2-822b-59004e0a7c7f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-ks-service-ll8sh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=cad79414-3141-41d2-822b-59004e0a7c7f;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=cad79414-3141-41d2-822b-59004e0a7c7f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d63e9eabf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2318 identity=9329 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cad79414-3141-41d2-822b-59004e0a7c7f,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=cad79414-3141-41d2-822b-59004e0a7c7f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-ks-service-ll8sh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d63e9eabf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2318 identity=9329 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-ks-service-ll8sh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d63e9eabf3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2318 identity=9329 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-ks-service-ll8sh subsys=endpoint level=info msg="Successful endpoint creation" containerID=d63e9eabf3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2318 identity=9329 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-ks-service-ll8sh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d63e9eabf3 endpointID=2318 k8sNamespace=openstack k8sPodName=barbican-ks-service-ll8sh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=cad79414-3141-41d2-822b-59004e0a7c7f k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=cad79414-3141-41d2-822b-59004e0a7c7f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d63e9eabf3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2318 identity=9329 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-ks-service-ll8sh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 e4a7bf0d-aa4b-452a-af62-4eb03d866ae8 default }" containerID=c31e3210a012e1ac376e2c5902a0c2574e8d50ac660c0403ccf6cebf6e7706bc datapathConfiguration="&{false false false false false }" interface=lxcfd6032140741 k8sPodName=openstack/barbican-ks-endpoints-cknqd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c31e3210a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cknqd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c31e3210a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=579bd13f-fd5b-4c18-8d2e-02055ef3ea88,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=579bd13f-fd5b-4c18-8d2e-02055ef3ea88,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cknqd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=579bd13f-fd5b-4c18-8d2e-02055ef3ea88;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=579bd13f-fd5b-4c18-8d2e-02055ef3ea88;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c31e3210a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cknqd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c31e3210a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identity=4375 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=579bd13f-fd5b-4c18-8d2e-02055ef3ea88,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=579bd13f-fd5b-4c18-8d2e-02055ef3ea88,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cknqd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c31e3210a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identity=4375 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cknqd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c31e3210a0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=235 identity=4375 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cknqd subsys=endpoint level=info msg="Successful endpoint creation" containerID=c31e3210a0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=235 identity=4375 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cknqd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c31e3210a0 endpointID=235 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-cknqd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=579bd13f-fd5b-4c18-8d2e-02055ef3ea88 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=579bd13f-fd5b-4c18-8d2e-02055ef3ea88 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c31e3210a0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=235 identity=4375 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cknqd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 6c2f5e33-65b6-4b0d-a684-f7a1908273cb default }" containerID=7464cb42d3deddbf8be0d5ed3d4fe23cc5d2a0255597a0458a56806ee6e97df3 datapathConfiguration="&{false false false false false }" interface=lxcd8e2f8e34b01 k8sPodName=openstack/barbican-ks-user-csjdw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7464cb42d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2580 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-ks-user-csjdw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7464cb42d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2580 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=459e508d-77d1-4709-a263-b48100d59f7d,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=459e508d-77d1-4709-a263-b48100d59f7d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-ks-user-csjdw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=459e508d-77d1-4709-a263-b48100d59f7d;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=459e508d-77d1-4709-a263-b48100d59f7d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=7464cb42d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2580 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-ks-user-csjdw line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7464cb42d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2580 identity=15719 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=459e508d-77d1-4709-a263-b48100d59f7d,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=459e508d-77d1-4709-a263-b48100d59f7d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-ks-user-csjdw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7464cb42d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2580 identity=15719 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-ks-user-csjdw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7464cb42d3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2580 identity=15719 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-ks-user-csjdw subsys=endpoint level=info msg="Successful endpoint creation" containerID=7464cb42d3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2580 identity=15719 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-ks-user-csjdw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7464cb42d3 endpointID=2580 k8sNamespace=openstack k8sPodName=barbican-ks-user-csjdw subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=459e508d-77d1-4709-a263-b48100d59f7d k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=459e508d-77d1-4709-a263-b48100d59f7d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7464cb42d3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2580 identity=15719 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-ks-user-csjdw subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.28 d6125b8d-8441-4cff-bcec-1ebf8e6972e5 default }" containerID=cf62cb2dbf6fbac86baaddf84f41b13c926621f8b33be38c6e4426738479ae43 datapathConfiguration="&{false false false false false }" interface=lxcd784263bfb5f k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-5mg55 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf62cb2dbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 ipv4=10.0.0.28 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-5mg55 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf62cb2dbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.28 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-5mg55 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf62cb2dbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 identity=8845 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.28 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-5mg55 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf62cb2dbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 identity=8845 ipv4=10.0.0.28 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-5mg55 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf62cb2dbf datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1495 identity=8845 ipv4=10.0.0.28 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-5mg55 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf62cb2dbf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1495 identity=8845 ipv4=10.0.0.28 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-5mg55 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.26 172b903e-5282-483c-84af-1bd69a6f6775 default }" containerID=397811791a6a9da19b233e3d363a1181baf651eec29ee53136601090a9eecf19 datapathConfiguration="&{false false false false false }" interface=lxc1a33aa78877d k8sPodName=openstack/rook-ceph-detect-version-d2985 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=397811791a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=323 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-detect-version-d2985 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=397811791a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=323 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=389b0c3f-b4ad-4724-b727-ddb7bc64abe7,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=389b0c3f-b4ad-4724-b727-ddb7bc64abe7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-detect-version-d2985 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=397811791a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=323 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-detect-version-d2985 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=389b0c3f-b4ad-4724-b727-ddb7bc64abe7;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=389b0c3f-b4ad-4724-b727-ddb7bc64abe7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=397811791a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=323 identity=6226 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=389b0c3f-b4ad-4724-b727-ddb7bc64abe7,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=389b0c3f-b4ad-4724-b727-ddb7bc64abe7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-detect-version-d2985 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=397811791a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=323 identity=6226 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-detect-version-d2985 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=397811791a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=323 identity=6226 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-detect-version-d2985 subsys=endpoint level=info msg="Successful endpoint creation" containerID=397811791a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=323 identity=6226 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-detect-version-d2985 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=397811791a endpointID=323 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-d2985 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=389b0c3f-b4ad-4724-b727-ddb7bc64abe7 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=389b0c3f-b4ad-4724-b727-ddb7bc64abe7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=397811791a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=323 identity=6226 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/rook-ceph-detect-version-d2985 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 996703d5-300c-4887-bff8-34048305dad4 default }" containerID=800bcba0be559205a909855b76013392411f7a5d9e6164a738a6a35da59c9895 datapathConfiguration="&{false false false false false }" interface=lxc098214e449f6 k8sPodName=openstack/ceph-object-controller-detect-version-n6pgs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=800bcba0be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3809 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n6pgs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=800bcba0be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3809 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=4b443210-5c7b-418a-8b22-a5959ad9b9d5,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=4b443210-5c7b-418a-8b22-a5959ad9b9d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n6pgs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=4b443210-5c7b-418a-8b22-a5959ad9b9d5;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=4b443210-5c7b-418a-8b22-a5959ad9b9d5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=800bcba0be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3809 identity=2292 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=4b443210-5c7b-418a-8b22-a5959ad9b9d5,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=4b443210-5c7b-418a-8b22-a5959ad9b9d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n6pgs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=800bcba0be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3809 identity=2292 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n6pgs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=800bcba0be datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3809 identity=2292 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n6pgs subsys=endpoint level=info msg="Successful endpoint creation" containerID=800bcba0be datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3809 identity=2292 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n6pgs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.237 fd13b4b0-72af-4fbb-9cfc-082a92048236 default }" containerID=05a7b0b2dd0dfb643b3c74ce4073c1cebacd5b0b3a7f729eec849dbd2b699b7a datapathConfiguration="&{false false false false false }" interface=lxc70c299116956 k8sPodName=local-path-storage/helper-pod-create-pvc-2948facf-4f4c-4787-b570-492ac202088d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05a7b0b2dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2948facf-4f4c-4787-b570-492ac202088d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05a7b0b2dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2948facf-4f4c-4787-b570-492ac202088d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05a7b0b2dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=36007 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2948facf-4f4c-4787-b570-492ac202088d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05a7b0b2dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=36007 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2948facf-4f4c-4787-b570-492ac202088d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=05a7b0b2dd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=22 identity=36007 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2948facf-4f4c-4787-b570-492ac202088d subsys=endpoint level=info msg="Successful endpoint creation" containerID=05a7b0b2dd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=22 identity=36007 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2948facf-4f4c-4787-b570-492ac202088d subsys=daemon level=info msg="Delete endpoint request" containerID=800bcba0be endpointID=3809 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-n6pgs subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=4b443210-5c7b-418a-8b22-a5959ad9b9d5 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=4b443210-5c7b-418a-8b22-a5959ad9b9d5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=800bcba0be datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3809 identity=2292 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n6pgs subsys=endpoint level=info msg="Delete endpoint request" containerID=05a7b0b2dd endpointID=22 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2948facf-4f4c-4787-b570-492ac202088d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=05a7b0b2dd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=22 identity=36007 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2948facf-4f4c-4787-b570-492ac202088d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 6fc4f74a-1110-4661-804d-9d310fc60fb1 default }" containerID=059910bd202c3a5e84b9fe407dc7dcfecacfd24dd9f0fc93ed00b9113ddfa057 datapathConfiguration="&{false false false false false }" interface=lxc6b85c37767f0 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=059910bd20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=059910bd20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=059910bd20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=059910bd20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 identity=61825 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=059910bd20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 identity=61825 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=059910bd20 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1957 identity=61825 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=059910bd20 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1957 identity=61825 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.252 0a0f777e-a7c8-4a85-8ab1-905f9bfc3a2b default }" containerID=67cd9a456c8e503aa66a79b3fe7dc9bc9385fbab6bf003944ef8ca57c9ad6dfc datapathConfiguration="&{false false false false false }" interface=lxcaa6e9101acad k8sPodName=openstack/glance-db-init-ptgd4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67cd9a456c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-init-ptgd4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67cd9a456c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ed2e1c7b-609b-4fde-ac6b-a4b5e4fcd280,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=ed2e1c7b-609b-4fde-ac6b-a4b5e4fcd280,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-init-ptgd4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=67cd9a456c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-init-ptgd4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ed2e1c7b-609b-4fde-ac6b-a4b5e4fcd280;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=ed2e1c7b-609b-4fde-ac6b-a4b5e4fcd280;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67cd9a456c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identity=23010 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ed2e1c7b-609b-4fde-ac6b-a4b5e4fcd280,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=ed2e1c7b-609b-4fde-ac6b-a4b5e4fcd280,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-init-ptgd4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67cd9a456c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identity=23010 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-init-ptgd4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67cd9a456c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=201 identity=23010 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-init-ptgd4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=67cd9a456c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=201 identity=23010 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-init-ptgd4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=67cd9a456c endpointID=201 k8sNamespace=openstack k8sPodName=glance-db-init-ptgd4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ed2e1c7b-609b-4fde-ac6b-a4b5e4fcd280 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=ed2e1c7b-609b-4fde-ac6b-a4b5e4fcd280 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=67cd9a456c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=201 identity=23010 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-init-ptgd4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 eaa396e2-d3ae-4b5c-8209-de0657c20817 default }" containerID=04696a9911232b84d7aebc31bf8f8f6b178eebca5315942e43995a58cc41b3c7 datapathConfiguration="&{false false false false false }" interface=lxcfbc183eaaffe k8sPodName=openstack/glance-db-sync-bb6gk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04696a9911 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=384 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-bb6gk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04696a9911 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=384 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3c6d1752-3682-4e2f-8638-b5372f446eba,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=3c6d1752-3682-4e2f-8638-b5372f446eba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-bb6gk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3c6d1752-3682-4e2f-8638-b5372f446eba;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=3c6d1752-3682-4e2f-8638-b5372f446eba;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04696a9911 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=384 identity=14607 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3c6d1752-3682-4e2f-8638-b5372f446eba,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=3c6d1752-3682-4e2f-8638-b5372f446eba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-bb6gk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04696a9911 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=384 identity=14607 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-bb6gk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=04696a9911 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=384 identity=14607 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-bb6gk subsys=endpoint level=info msg="Successful endpoint creation" containerID=04696a9911 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=384 identity=14607 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-bb6gk subsys=daemon level=info msg="Delete endpoint request" containerID=04696a9911 endpointID=384 k8sNamespace=openstack k8sPodName=glance-db-sync-bb6gk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3c6d1752-3682-4e2f-8638-b5372f446eba k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=3c6d1752-3682-4e2f-8638-b5372f446eba k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=04696a9911 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=384 identity=14607 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-bb6gk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 2f767627-22ec-4872-8266-d158fc4b0ee6 default }" containerID=e87864c89d4190f2aafdd8bbf7304d1bf1c7a142fed1c67059364de016da4acf datapathConfiguration="&{false false false false false }" interface=lxce48469d1a175 k8sPodName=openstack/glance-rabbit-init-rw8d4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e87864c89d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-rabbit-init-rw8d4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e87864c89d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f726f9c9-36f9-44f7-8817-e465292de3d9,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f726f9c9-36f9-44f7-8817-e465292de3d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-rabbit-init-rw8d4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e87864c89d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-rabbit-init-rw8d4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f726f9c9-36f9-44f7-8817-e465292de3d9;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f726f9c9-36f9-44f7-8817-e465292de3d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e87864c89d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 identity=18532 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f726f9c9-36f9-44f7-8817-e465292de3d9,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f726f9c9-36f9-44f7-8817-e465292de3d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-rabbit-init-rw8d4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e87864c89d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 identity=18532 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-rabbit-init-rw8d4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e87864c89d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=413 identity=18532 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-rabbit-init-rw8d4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e87864c89d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=413 identity=18532 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-rabbit-init-rw8d4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e87864c89d endpointID=413 k8sNamespace=openstack k8sPodName=glance-rabbit-init-rw8d4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f726f9c9-36f9-44f7-8817-e465292de3d9 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f726f9c9-36f9-44f7-8817-e465292de3d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e87864c89d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=413 identity=18532 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-rabbit-init-rw8d4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 b02c13cd-7afa-4be5-a2c0-ac863bca6415 default }" containerID=f8073fed018896d8ebbdcf43f1429722852b8897fe3ab66d80857e4a14da2f36 datapathConfiguration="&{false false false false false }" interface=lxccebd9d64539a k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-82mdb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8073fed01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-82mdb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8073fed01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-82mdb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f8073fed01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-82mdb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8073fed01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identity=43934 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-82mdb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8073fed01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identity=43934 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-82mdb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f8073fed01 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=755 identity=43934 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-82mdb subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8073fed01 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=755 identity=43934 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-82mdb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.21 e83ce580-b072-4b03-8c0e-c01b6286aafe default }" containerID=5baae1a517d79e0ae1a43368e1867b6ebaa3e2a7b77fa2b180d35bed03ce87f5 datapathConfiguration="&{false false false false false }" interface=lxcff071764c032 k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-qbx7k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5baae1a517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-qbx7k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5baae1a517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-qbx7k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5baae1a517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 identity=3701 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-qbx7k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5baae1a517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 identity=3701 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-qbx7k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5baae1a517 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=558 identity=3701 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-qbx7k subsys=endpoint level=info msg="Successful endpoint creation" containerID=5baae1a517 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=558 identity=3701 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-qbx7k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.130 17bea335-079b-47de-91e0-4cba8e665986 default }" containerID=41f40724f07b70a685c7297042f30ef0dee0ad464f7dc6bbddfb6ce421fffabf datapathConfiguration="&{false false false false false }" interface=lxcd5b57352a5ba k8sPodName=openstack/glance-ks-service-qwdtz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41f40724f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-ks-service-qwdtz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41f40724f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0a058dd7-b802-4214-8816-e66c680307fb,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=0a058dd7-b802-4214-8816-e66c680307fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-ks-service-qwdtz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0a058dd7-b802-4214-8816-e66c680307fb;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=0a058dd7-b802-4214-8816-e66c680307fb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41f40724f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identity=23451 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0a058dd7-b802-4214-8816-e66c680307fb,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=0a058dd7-b802-4214-8816-e66c680307fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-ks-service-qwdtz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41f40724f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identity=23451 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-ks-service-qwdtz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41f40724f0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=349 identity=23451 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-ks-service-qwdtz subsys=endpoint level=info msg="Successful endpoint creation" containerID=41f40724f0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=349 identity=23451 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-ks-service-qwdtz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=41f40724f0 endpointID=349 k8sNamespace=openstack k8sPodName=glance-ks-service-qwdtz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0a058dd7-b802-4214-8816-e66c680307fb k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=0a058dd7-b802-4214-8816-e66c680307fb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=41f40724f0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=349 identity=23451 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-ks-service-qwdtz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 941f8ebf-0180-4f84-8356-202557fdd59a default }" containerID=8b5f118a8136b2f79deed579f3ac7e507b8228ad6439ddc1450940c6ed1b68c9 datapathConfiguration="&{false false false false false }" interface=lxc551d96d47612 k8sPodName=openstack/glance-ks-endpoints-vgpkr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b5f118a81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3743 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-ks-endpoints-vgpkr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b5f118a81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3743 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7837b012-9065-441b-b93a-5d19624aa17e,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7837b012-9065-441b-b93a-5d19624aa17e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-ks-endpoints-vgpkr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7837b012-9065-441b-b93a-5d19624aa17e;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=7837b012-9065-441b-b93a-5d19624aa17e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b5f118a81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3743 identity=23904 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7837b012-9065-441b-b93a-5d19624aa17e,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7837b012-9065-441b-b93a-5d19624aa17e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-ks-endpoints-vgpkr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b5f118a81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3743 identity=23904 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-ks-endpoints-vgpkr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8b5f118a81 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3743 identity=23904 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-ks-endpoints-vgpkr subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b5f118a81 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3743 identity=23904 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-ks-endpoints-vgpkr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.233 2401396b-c92c-4dc4-8915-049a99be2008 default }" containerID=5726b22c99901870ac3838d30593b5979570f271d3f66da89310a4dfde3f6c9b datapathConfiguration="&{false false false false false }" interface=lxc0524e3ad920a k8sPodName=openstack/ceph-object-controller-detect-version-f6c4s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5726b22c99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f6c4s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5726b22c99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=6dabaa82-6d18-4c9c-bdf8-45ce63506b80,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=6dabaa82-6d18-4c9c-bdf8-45ce63506b80,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f6c4s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5726b22c99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.233 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f6c4s line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=6dabaa82-6d18-4c9c-bdf8-45ce63506b80;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=6dabaa82-6d18-4c9c-bdf8-45ce63506b80;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5726b22c99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identity=5099 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=6dabaa82-6d18-4c9c-bdf8-45ce63506b80,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=6dabaa82-6d18-4c9c-bdf8-45ce63506b80,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f6c4s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5726b22c99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identity=5099 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f6c4s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5726b22c99 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=866 identity=5099 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f6c4s subsys=endpoint level=info msg="Successful endpoint creation" containerID=5726b22c99 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=866 identity=5099 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f6c4s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8b5f118a81 endpointID=3743 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-vgpkr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7837b012-9065-441b-b93a-5d19624aa17e k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=7837b012-9065-441b-b93a-5d19624aa17e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8b5f118a81 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3743 identity=23904 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-ks-endpoints-vgpkr subsys=endpoint level=info msg="Delete endpoint request" containerID=5726b22c99 endpointID=866 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-f6c4s subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=6dabaa82-6d18-4c9c-bdf8-45ce63506b80 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=6dabaa82-6d18-4c9c-bdf8-45ce63506b80 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=5726b22c99 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=866 identity=5099 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f6c4s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 3d078e7c-c8b0-4cb0-9205-0e386def5cd5 default }" containerID=5373dfda2b4e0884710a1276cdbb85a59696d722639314adf931e1dbbce2463a datapathConfiguration="&{false false false false false }" interface=lxcbd5d3e8f9215 k8sPodName=openstack/glance-ks-user-7vl8m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5373dfda2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1656 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-ks-user-7vl8m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5373dfda2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1656 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=65f23e2b-48f2-47ca-807e-82d1482e047e,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=65f23e2b-48f2-47ca-807e-82d1482e047e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-ks-user-7vl8m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=65f23e2b-48f2-47ca-807e-82d1482e047e;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=65f23e2b-48f2-47ca-807e-82d1482e047e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5373dfda2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1656 identity=2760 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=65f23e2b-48f2-47ca-807e-82d1482e047e,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=65f23e2b-48f2-47ca-807e-82d1482e047e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-ks-user-7vl8m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5373dfda2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1656 identity=2760 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-ks-user-7vl8m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5373dfda2b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1656 identity=2760 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-ks-user-7vl8m subsys=endpoint level=info msg="Successful endpoint creation" containerID=5373dfda2b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1656 identity=2760 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-ks-user-7vl8m subsys=daemon level=info msg="Delete endpoint request" containerID=5373dfda2b endpointID=1656 k8sNamespace=openstack k8sPodName=glance-ks-user-7vl8m subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=65f23e2b-48f2-47ca-807e-82d1482e047e k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=65f23e2b-48f2-47ca-807e-82d1482e047e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5373dfda2b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1656 identity=2760 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/glance-ks-user-7vl8m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 131e886a-5ebb-4808-8ce2-761b2768a56f default }" containerID=a2ee8fc513be55c989d63a6118951a12bb1ba370800bedee77c12e11475dd11a datapathConfiguration="&{false false false false false }" interface=lxcf28280991e36 k8sPodName=openstack/glance-metadefs-load-fm8dt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2ee8fc513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1452 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-fm8dt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2ee8fc513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1452 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=19f5cb12-4692-4911-bd94-4fbe1c992ed7,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=19f5cb12-4692-4911-bd94-4fbe1c992ed7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-fm8dt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=19f5cb12-4692-4911-bd94-4fbe1c992ed7;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=19f5cb12-4692-4911-bd94-4fbe1c992ed7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2ee8fc513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1452 identity=35774 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=19f5cb12-4692-4911-bd94-4fbe1c992ed7,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=19f5cb12-4692-4911-bd94-4fbe1c992ed7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-fm8dt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2ee8fc513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1452 identity=35774 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-fm8dt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2ee8fc513 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1452 identity=35774 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-fm8dt subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2ee8fc513 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1452 identity=35774 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-fm8dt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a2ee8fc513 endpointID=1452 k8sNamespace=openstack k8sPodName=glance-metadefs-load-fm8dt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=19f5cb12-4692-4911-bd94-4fbe1c992ed7 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=19f5cb12-4692-4911-bd94-4fbe1c992ed7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a2ee8fc513 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1452 identity=35774 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-fm8dt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 6f6f64d8-b07f-4c15-821c-a17c950d0b34 default }" containerID=1bc2786b141a9d838506fd0e70ce419840488ab3f2026cf97bab1aaa9f401469 datapathConfiguration="&{false false false false false }" interface=lxc44be7b7efb91 k8sPodName=openstack/glance-storage-init-zlprc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bc2786b14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-storage-init-zlprc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bc2786b14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a6f26db8-703c-42b1-81d5-1f2a04d57505,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a6f26db8-703c-42b1-81d5-1f2a04d57505,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-storage-init-zlprc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a6f26db8-703c-42b1-81d5-1f2a04d57505;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=a6f26db8-703c-42b1-81d5-1f2a04d57505;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1bc2786b14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identity=65387 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a6f26db8-703c-42b1-81d5-1f2a04d57505,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a6f26db8-703c-42b1-81d5-1f2a04d57505,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-storage-init-zlprc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1bc2786b14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identity=65387 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-storage-init-zlprc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1bc2786b14 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1161 identity=65387 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-storage-init-zlprc subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bc2786b14 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1161 identity=65387 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-storage-init-zlprc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1bc2786b14 endpointID=1161 k8sNamespace=openstack k8sPodName=glance-storage-init-zlprc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a6f26db8-703c-42b1-81d5-1f2a04d57505 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=a6f26db8-703c-42b1-81d5-1f2a04d57505 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1bc2786b14 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1161 identity=65387 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-storage-init-zlprc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 04841516-5282-42fc-a0df-2204bb8763c1 default }" containerID=81cf0a606da876880d5f0e4a7a3f7348b73fc1e74f1fe3e2c43ceace31ec250f datapathConfiguration="&{false false false false false }" interface=lxc27fc691ea16d k8sPodName=openstack/glance-api-69cfb866c8-cmgbw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81cf0a606d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2634 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-api-69cfb866c8-cmgbw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81cf0a606d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2634 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-api-69cfb866c8-cmgbw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=81cf0a606d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2634 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-api-69cfb866c8-cmgbw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81cf0a606d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2634 identity=7764 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-api-69cfb866c8-cmgbw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81cf0a606d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2634 identity=7764 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-api-69cfb866c8-cmgbw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81cf0a606d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2634 identity=7764 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-api-69cfb866c8-cmgbw subsys=endpoint level=info msg="Successful endpoint creation" containerID=81cf0a606d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2634 identity=7764 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-api-69cfb866c8-cmgbw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.218 5017d974-3aa2-403b-acfa-b36b3398f562 default }" containerID=7226e3b92215d463297f002440fa8136ea4005952177a616c8653eabce6e919c datapathConfiguration="&{false false false false false }" interface=lxc72a196a0bea7 k8sPodName=openstack/staffeln-api-75ddbcb4b7-4fkk5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7226e3b922 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/staffeln-api-75ddbcb4b7-4fkk5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7226e3b922 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/staffeln-api-75ddbcb4b7-4fkk5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7226e3b922 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 identity=19853 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/staffeln-api-75ddbcb4b7-4fkk5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7226e3b922 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 identity=19853 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/staffeln-api-75ddbcb4b7-4fkk5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7226e3b922 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3494 identity=19853 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/staffeln-api-75ddbcb4b7-4fkk5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7226e3b922 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3494 identity=19853 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/staffeln-api-75ddbcb4b7-4fkk5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.179 df939f50-f6e8-496b-907d-445bc110edca default }" containerID=caedf2b143d19c1b5fe4563ea2043ac9b3fa7c904feec5ec64d3b8750d15428b datapathConfiguration="&{false false false false false }" interface=lxc214cc1746e9c k8sPodName=openstack/staffeln-db-init-w5xpx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=caedf2b143 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-db-init-w5xpx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=caedf2b143 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=64915160-df4b-4094-b8ed-7b14141d4758,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=64915160-df4b-4094-b8ed-7b14141d4758,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-db-init-w5xpx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=64915160-df4b-4094-b8ed-7b14141d4758;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=64915160-df4b-4094-b8ed-7b14141d4758;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=caedf2b143 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 identity=16940 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=64915160-df4b-4094-b8ed-7b14141d4758,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=64915160-df4b-4094-b8ed-7b14141d4758,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-db-init-w5xpx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=caedf2b143 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 identity=16940 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-db-init-w5xpx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=caedf2b143 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1454 identity=16940 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-db-init-w5xpx subsys=endpoint level=info msg="Successful endpoint creation" containerID=caedf2b143 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1454 identity=16940 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-db-init-w5xpx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.131 c9517189-6965-4600-965b-21f79c1390cd default }" containerID=be7b701e0ec5576f22f2e0396485af20743a4b1744affce149379bf39b8d2cb8 datapathConfiguration="&{false false false false false }" interface=lxc21a79db7def4 k8sPodName=openstack/staffeln-conductor-d494f6f68-mnzph labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be7b701e0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/staffeln-conductor-d494f6f68-mnzph subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be7b701e0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/staffeln-conductor-d494f6f68-mnzph subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be7b701e0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identity=34996 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/staffeln-conductor-d494f6f68-mnzph oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be7b701e0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identity=34996 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/staffeln-conductor-d494f6f68-mnzph subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=be7b701e0e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=440 identity=34996 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/staffeln-conductor-d494f6f68-mnzph subsys=endpoint level=info msg="Successful endpoint creation" containerID=be7b701e0e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=440 identity=34996 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/staffeln-conductor-d494f6f68-mnzph subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=caedf2b143 endpointID=1454 k8sNamespace=openstack k8sPodName=staffeln-db-init-w5xpx subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=64915160-df4b-4094-b8ed-7b14141d4758 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=64915160-df4b-4094-b8ed-7b14141d4758 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=caedf2b143 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1454 identity=16940 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/staffeln-db-init-w5xpx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 11c774f0-961f-4572-9bbb-c0e1c35f2aa5 default }" containerID=7686da309164635b2e0a7f9e2dbd7c53e318bbca7c8100736bc3dc87c8d1a80b datapathConfiguration="&{false false false false false }" interface=lxc7e108b710fc5 k8sPodName=openstack/staffeln-db-sync-65m8w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7686da3091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-db-sync-65m8w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7686da3091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f4e07789-8871-4cd8-968b-4a3bfeb20bf8,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f4e07789-8871-4cd8-968b-4a3bfeb20bf8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-db-sync-65m8w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=f4e07789-8871-4cd8-968b-4a3bfeb20bf8;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=f4e07789-8871-4cd8-968b-4a3bfeb20bf8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7686da3091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 identity=29533 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f4e07789-8871-4cd8-968b-4a3bfeb20bf8,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f4e07789-8871-4cd8-968b-4a3bfeb20bf8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-db-sync-65m8w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7686da3091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3543 identity=29533 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-db-sync-65m8w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7686da3091 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3543 identity=29533 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-db-sync-65m8w subsys=endpoint level=info msg="Successful endpoint creation" containerID=7686da3091 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3543 identity=29533 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/staffeln-db-sync-65m8w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager