level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.355967ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="42.291µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="827.847µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="5.74µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=96.071729ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="10.2µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="14.27µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="47.871µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="56.701µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="74.211µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="543.801µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.86µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.275717ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=5.888209ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="35.37µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="35.561µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="207.404µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="141.762µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="68.471µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=47.001749ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="121.432µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.87µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.36.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.960708ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="13.04µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.257583ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.102452ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.05µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.4µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.64µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.35µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="21.45µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="13.28µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="43.331µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="296.226µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.57µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.34µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="157.623µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="656.213µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="709.354µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.13µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="15.9µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.36 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.36 ipAddr.ipv6="" k8sNodeIP=162.253.55.36 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.36" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.93" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.36" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.36} {CiliumInternalIP 10.0.0.93}] 10.0.0.0/24 [] [] 10.0.0.238 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:42307" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.461547263s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="26.5µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="11.99µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="66.971µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="8.84µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2039 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2039 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2039 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.411502378s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=317.239604ms file-path=/var/run/cilium/state/templates/2d74468cb01de1747f937c4a4d216631c3560e6a2210a621cc20d73e993a8622/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2039 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3116 ipv4=10.0.0.238 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3116 identityLabels="reserved:health" ipv4=10.0.0.238 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3116 identity=4 identityLabels="reserved:health" ipv4=10.0.0.238 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.079043983s file-path=/var/run/cilium/state/templates/46c20db1b50756f2816aacee32b709d6ffdae6adcbbcf92d796df71729d82822/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3116 identity=4 ipv4=10.0.0.238 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 bdc0c89b-66fe-4e9b-a6c2-a27fa2b6c6fe default }" containerID=9c44e0b631085ae2798cae001e5ed3634f6a6b815fc8444361c9448d52bc5220 datapathConfiguration="&{false false false false false }" interface=lxc07bc7e15083a k8sPodName=kube-system/coredns-7c96b6546b-9rflr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c44e0b631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 ipv4=10.0.0.149 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9rflr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c44e0b631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.149 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9rflr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c44e0b631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=39859 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.149 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9rflr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c44e0b631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=39859 ipv4=10.0.0.149 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9rflr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.216 827380c6-5cff-4b62-bfc8-a92a16e586be default }" containerID=28a1644a0ce820af32b27178374081bfa4d970ae2403b9ff95d0503404e77110 datapathConfiguration="&{false false false false false }" interface=lxc695266f1ba27 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ddzdr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28a1644a0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 ipv4=10.0.0.216 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ddzdr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28a1644a0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=138b82c2-1836-438f-abce-dc52f329d56c,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=138b82c2-1836-438f-abce-dc52f329d56c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.216 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ddzdr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=138b82c2-1836-438f-abce-dc52f329d56c;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=138b82c2-1836-438f-abce-dc52f329d56c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28a1644a0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identity=38527 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=138b82c2-1836-438f-abce-dc52f329d56c,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=138b82c2-1836-438f-abce-dc52f329d56c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.216 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ddzdr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28a1644a0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identity=38527 ipv4=10.0.0.216 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ddzdr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c44e0b631 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=563 identity=39859 ipv4=10.0.0.149 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9rflr subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c44e0b631 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=563 identity=39859 ipv4=10.0.0.149 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9rflr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=28a1644a0c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=18 identity=38527 ipv4=10.0.0.216 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ddzdr subsys=endpoint level=info msg="Successful endpoint creation" containerID=28a1644a0c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=18 identity=38527 ipv4=10.0.0.216 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ddzdr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=28a1644a0c endpointID=18 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-ddzdr subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=138b82c2-1836-438f-abce-dc52f329d56c k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=138b82c2-1836-438f-abce-dc52f329d56c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=28a1644a0c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=18 identity=38527 ipv4=10.0.0.216 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ddzdr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 02169be6-bd34-4129-a142-56b1381d3aa9 default }" containerID=7b1b4d5d48ca32bd8d7db8affd8a55309e0e7791fcfac2afdcc20c605bfcce84 datapathConfiguration="&{false false false false false }" interface=lxc9d2a225e3426 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mpf8p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b1b4d5d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2978 ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mpf8p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b1b4d5d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2978 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mpf8p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7b1b4d5d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2978 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mpf8p line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b1b4d5d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2978 identity=8113 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mpf8p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b1b4d5d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2978 identity=8113 ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mpf8p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b1b4d5d48 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2978 identity=8113 ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mpf8p subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b1b4d5d48 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2978 identity=8113 ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mpf8p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2039 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02039 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02039 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02039 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02039:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2039 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 7a0ff7f3-3521-4974-a320-53a031c2f851 default }" containerID=d5c26a7277399bae830742e62840566f79161e039fa34c3bd8e76d75797e0027 datapathConfiguration="&{false false false false false }" interface=lxc1128bb7ddc3c k8sPodName=kube-system/coredns-67659f764b-6zm9g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5c26a7277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 ipv4=10.0.0.92 ipv6= k8sPodName=kube-system/coredns-67659f764b-6zm9g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5c26a7277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.92 ipv6= k8sPodName=kube-system/coredns-67659f764b-6zm9g subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d5c26a7277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 identity=39859 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.92 ipv6= k8sPodName=kube-system/coredns-67659f764b-6zm9g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5c26a7277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=644 identity=39859 ipv4=10.0.0.92 ipv6= k8sPodName=kube-system/coredns-67659f764b-6zm9g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 0e1fb25a-3681-41fc-b903-dfb19137598b default }" containerID=2daa2a6f5b7bf4893eb13f37c3d599b6282b5713c99d642bd59269f092888591 datapathConfiguration="&{false false false false false }" interface=lxc5ec7473a163e k8sPodName=kube-system/coredns-67659f764b-khkd9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2daa2a6f5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-khkd9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2daa2a6f5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-khkd9 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2daa2a6f5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identity=39859 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-khkd9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2daa2a6f5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identity=39859 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-khkd9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d5c26a7277 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=644 identity=39859 ipv4=10.0.0.92 ipv6= k8sPodName=kube-system/coredns-67659f764b-6zm9g subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5c26a7277 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=644 identity=39859 ipv4=10.0.0.92 ipv6= k8sPodName=kube-system/coredns-67659f764b-6zm9g subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2daa2a6f5b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=416 identity=39859 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-khkd9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2daa2a6f5b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=416 identity=39859 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-khkd9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.249 7f4ec9bb-fa16-403d-bf84-1b138969af96 default }" containerID=d129904d31e562268d10490102f2d4600a21cf10b3fe189486efadaad4afab73 datapathConfiguration="&{false false false false false }" interface=lxc87d7af80c698 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rxbqq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d129904d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rxbqq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d129904d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rxbqq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d129904d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rxbqq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d129904d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identity=64126 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rxbqq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d129904d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identity=64126 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rxbqq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d129904d31 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=386 identity=64126 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rxbqq subsys=endpoint level=info msg="Successful endpoint creation" containerID=d129904d31 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=386 identity=64126 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rxbqq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9c44e0b631 endpointID=563 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-9rflr subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=9c44e0b631 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=563 identity=39859 ipv4=10.0.0.149 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9rflr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 57eb1c9f-b4a7-41a9-9a38-4d49f70c441b default }" containerID=3bd13d63936cda232f39d3f14d02200d666ada841f42b987d30aac060c3dc014 datapathConfiguration="&{false false false false false }" interface=lxcd9b42e38e8e6 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kxzvg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bd13d6393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3533 ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kxzvg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 4bb30350-0c35-4511-acac-3bc3d88bae2b default }" containerID=0f210ae41b74a64d620b3ce084438f616f1d54ee7648421cdede8fbd7857dae4 datapathConfiguration="&{false false false false false }" interface=lxc4da71eb89e6c k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pz24q labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=3bd13d6393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3533 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kxzvg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=0f210ae41b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2756 ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pz24q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f210ae41b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2756 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pz24q subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bd13d6393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3533 identity=53831 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kxzvg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bd13d6393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3533 identity=53831 ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kxzvg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0f210ae41b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2756 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pz24q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f210ae41b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2756 identity=33426 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pz24q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f210ae41b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2756 identity=33426 ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pz24q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 7f064297-f953-467d-8948-4424dc53e3de default }" containerID=232dc3bc5bd00f83a3d421b5d7c7a0f87de1c6c521fa4de6ab4558f7ab6b441e datapathConfiguration="&{false false false false false }" interface=lxc1a240f84f20c k8sPodName=cert-manager/cert-manager-75c4c745bc-pccwl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=232dc3bc5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3893 ipv4=10.0.0.101 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-pccwl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=232dc3bc5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3893 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.101 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-pccwl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=232dc3bc5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3893 identity=52945 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.101 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-pccwl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=232dc3bc5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3893 identity=52945 ipv4=10.0.0.101 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-pccwl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f210ae41b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2756 identity=33426 ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pz24q subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f210ae41b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2756 identity=33426 ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pz24q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3bd13d6393 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3533 identity=53831 ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kxzvg subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bd13d6393 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3533 identity=53831 ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kxzvg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=232dc3bc5b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3893 identity=52945 ipv4=10.0.0.101 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-pccwl subsys=endpoint level=info msg="Successful endpoint creation" containerID=232dc3bc5b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3893 identity=52945 ipv4=10.0.0.101 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-pccwl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.112 ff36f756-2ade-4df6-bf89-32426a535ed0 default }" containerID=dcb0042a65d8420039f136dd8f3af9840ef4fbbd87107628f732784bc8f2a9f2 datapathConfiguration="&{false false false false false }" interface=lxcfa84d1946bc0 k8sPodName=cert-manager/cert-manager-startupapicheck-4l549 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dcb0042a65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 ipv4=10.0.0.112 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4l549 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dcb0042a65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=af474970-6015-4fac-afde-a8aa1458dc28,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=af474970-6015-4fac-afde-a8aa1458dc28,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.112 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4l549 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=af474970-6015-4fac-afde-a8aa1458dc28;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=af474970-6015-4fac-afde-a8aa1458dc28;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dcb0042a65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 identity=10566 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=af474970-6015-4fac-afde-a8aa1458dc28,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=af474970-6015-4fac-afde-a8aa1458dc28,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.112 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4l549 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dcb0042a65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 identity=10566 ipv4=10.0.0.112 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4l549 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dcb0042a65 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2019 identity=10566 ipv4=10.0.0.112 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4l549 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dcb0042a65 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2019 identity=10566 ipv4=10.0.0.112 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4l549 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dcb0042a65 endpointID=2019 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-4l549 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=af474970-6015-4fac-afde-a8aa1458dc28 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=af474970-6015-4fac-afde-a8aa1458dc28 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=dcb0042a65 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2019 identity=10566 ipv4=10.0.0.112 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4l549 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 f334a86e-dc00-4302-9dfd-ba9114b0e312 default }" containerID=acdd9a38bda4b7a2c6625e69fe558568ce61ff5237d275dcfaf6d5fc14f82b7c datapathConfiguration="&{false false false false false }" interface=lxc931bcfb5be3a k8sPodName=ingress-nginx/ingress-nginx-admission-create-9rrgh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=acdd9a38bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9rrgh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=acdd9a38bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4508e107-7034-4c4d-9c19-6c30298b05c2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=4508e107-7034-4c4d-9c19-6c30298b05c2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9rrgh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=acdd9a38bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9rrgh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=4508e107-7034-4c4d-9c19-6c30298b05c2;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=4508e107-7034-4c4d-9c19-6c30298b05c2;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=acdd9a38bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 identity=19785 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4508e107-7034-4c4d-9c19-6c30298b05c2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=4508e107-7034-4c4d-9c19-6c30298b05c2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9rrgh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=acdd9a38bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 identity=19785 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9rrgh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=acdd9a38bd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1666 identity=19785 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9rrgh subsys=endpoint level=info msg="Successful endpoint creation" containerID=acdd9a38bd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1666 identity=19785 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9rrgh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=acdd9a38bd endpointID=1666 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-9rrgh subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=4508e107-7034-4c4d-9c19-6c30298b05c2 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=4508e107-7034-4c4d-9c19-6c30298b05c2 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=acdd9a38bd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1666 identity=19785 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9rrgh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 126d5a31-3e32-49f0-89dc-7f0d62cf9ab7 default }" containerID=c63557e848978c49d7a36668bda8437563149fd2c83f5b0f530f381d64b4a12b datapathConfiguration="&{false false false false false }" interface=lxc414a479dc744 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wcj2s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c63557e848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3054 ipv4=10.0.0.245 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wcj2s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c63557e848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3054 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.245 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wcj2s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c63557e848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3054 identity=4408 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.245 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wcj2s oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c63557e848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3054 identity=4408 ipv4=10.0.0.245 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wcj2s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c63557e848 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3054 identity=4408 ipv4=10.0.0.245 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wcj2s subsys=endpoint level=info msg="Successful endpoint creation" containerID=c63557e848 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3054 identity=4408 ipv4=10.0.0.245 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wcj2s subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.50 b0f8f2c2-a3a9-4a41-aa0b-d86cc54211b3 default }" containerID=d788bce97c3d1f8b15ba365943eb7446447bd69338a571f59a2340b820949ff1 datapathConfiguration="&{false false false false false }" interface=lxc4fa1d89be0bf k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dlvf6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d788bce97c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2620 ipv4=10.0.0.50 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dlvf6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d788bce97c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2620 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5f9fc2bd-a3e4-4a7d-87fd-37de482e44fb,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=5f9fc2bd-a3e4-4a7d-87fd-37de482e44fb,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.50 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dlvf6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=5f9fc2bd-a3e4-4a7d-87fd-37de482e44fb;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=5f9fc2bd-a3e4-4a7d-87fd-37de482e44fb;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d788bce97c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2620 identity=40659 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5f9fc2bd-a3e4-4a7d-87fd-37de482e44fb,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=5f9fc2bd-a3e4-4a7d-87fd-37de482e44fb,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.50 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dlvf6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d788bce97c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2620 identity=40659 ipv4=10.0.0.50 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dlvf6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d788bce97c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2620 identity=40659 ipv4=10.0.0.50 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dlvf6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d788bce97c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2620 identity=40659 ipv4=10.0.0.50 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dlvf6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d788bce97c endpointID=2620 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-dlvf6 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=5f9fc2bd-a3e4-4a7d-87fd-37de482e44fb k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=5f9fc2bd-a3e4-4a7d-87fd-37de482e44fb k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=d788bce97c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2620 identity=40659 ipv4=10.0.0.50 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dlvf6 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=30ced726-7ce2-4f9b-b6aa-7d86a0e7921b] Description:}]" policyAddRequest=5947db85-bd35-4e56-8410-52ed1cd92e3c subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5947db85-bd35-4e56-8410-52ed1cd92e3c policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=21a419fc-0f88-4311-b421-eaaed96bf8b4] Description:}]" policyAddRequest=da20bea5-8056-4e40-8ba7-22cf5116ea02 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=da20bea5-8056-4e40-8ba7-22cf5116ea02 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.21 e559204f-c8c6-44a0-a8bf-c487e5dfd199 default }" containerID=b04ee813fdb49b993ec1adfe6f40351c2b5693118b773c0ad71365d3e015ddcd datapathConfiguration="&{false false false false false }" interface=lxc55956a89ea3b k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-g7p9j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b04ee813fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-g7p9j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b04ee813fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-g7p9j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.211 d1fc7277-5d93-48ed-b578-2fd0c55ad1aa default }" containerID=0e189724d2f43f683076ec5d222a49682f23a7b971e73022e25813d1eb07376c datapathConfiguration="&{false false false false false }" interface=lxcc2c2fb57e045 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ndjh5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e189724d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ndjh5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e189724d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ndjh5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b04ee813fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=25666 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-g7p9j oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=b04ee813fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=25666 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-g7p9j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0e189724d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ndjh5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e189724d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identity=16425 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ndjh5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e189724d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identity=16425 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ndjh5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b04ee813fd datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=59 identity=25666 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-g7p9j subsys=endpoint level=info msg="Successful endpoint creation" containerID=b04ee813fd datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=59 identity=25666 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-g7p9j subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0e189724d2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=690 identity=16425 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ndjh5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e189724d2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=690 identity=16425 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ndjh5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.195 6d91197e-2810-4d7b-a17d-2af4cabf26a0 default }" containerID=ddfc8b8d22aca9ce828a0b69f174779a9d56b952df03f0bef7bfcf9ef80a7c3a datapathConfiguration="&{false false false false false }" interface=lxc0d28e8bc872f k8sPodName=openstack/pxc-operator-7cff949c8b-pp77x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ddfc8b8d22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=374 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-pp77x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ddfc8b8d22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=374 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-pp77x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ddfc8b8d22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=374 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.195 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-pp77x line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ddfc8b8d22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=374 identity=58875 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-pp77x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ddfc8b8d22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=374 identity=58875 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-pp77x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ddfc8b8d22 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=374 identity=58875 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-pp77x subsys=endpoint level=info msg="Successful endpoint creation" containerID=ddfc8b8d22 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=374 identity=58875 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-pp77x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.201 13090f09-c18f-4a58-92c3-cb3788207e73 default }" containerID=92e04ffcc1146088089d4e351cd20afa9e5da7463ca77815cb8e3deac371ec02 datapathConfiguration="&{false false false false false }" interface=lxc699726a62380 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92e04ffcc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1705 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92e04ffcc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1705 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92e04ffcc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1705 identity=62650 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92e04ffcc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1705 identity=62650 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.56 6c2c28df-171f-42d7-8453-a069fec3a6ed default }" containerID=b638f333aa5ea794043fbdd3bbab616ef26a9617285cac850726367d2503c02b datapathConfiguration="&{false false false false false }" interface=lxcd7e037ec9f48 k8sPodName=local-path-storage/helper-pod-create-pvc-a0646b05-06d2-4904-8ec1-6c192018d709 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b638f333aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0646b05-06d2-4904-8ec1-6c192018d709 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b638f333aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0646b05-06d2-4904-8ec1-6c192018d709 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b638f333aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identity=17181 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0646b05-06d2-4904-8ec1-6c192018d709 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b638f333aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identity=17181 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0646b05-06d2-4904-8ec1-6c192018d709 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=92e04ffcc1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1705 identity=62650 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=92e04ffcc1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1705 identity=62650 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b638f333aa datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=879 identity=17181 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0646b05-06d2-4904-8ec1-6c192018d709 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b638f333aa datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=879 identity=17181 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0646b05-06d2-4904-8ec1-6c192018d709 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b638f333aa endpointID=879 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a0646b05-06d2-4904-8ec1-6c192018d709 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b638f333aa datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=879 identity=17181 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a0646b05-06d2-4904-8ec1-6c192018d709 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 85201ab6-1c3a-4091-a2ec-a381752c81f3 default }" containerID=404e5e1bb571fbeef3d31d20ac210cfe38f38c2083c4588e1da0d6d0aabe0312 datapathConfiguration="&{false false false false false }" interface=lxc3585f04fd0ee k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=404e5e1bb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3392 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=404e5e1bb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3392 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=404e5e1bb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3392 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.182 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=404e5e1bb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3392 identity=16853 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=404e5e1bb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3392 identity=16853 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=404e5e1bb5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3392 identity=16853 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=404e5e1bb5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3392 identity=16853 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=30c3bd89-0fef-4254-ac71-f345d553ec98] Description:}]" policyAddRequest=74abffa7-056c-4f3f-8ed8-cc6dd835f93c subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=74abffa7-056c-4f3f-8ed8-cc6dd835f93c policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.73 560a485d-fd69-4dcb-86e5-e3bc3bbf31f8 default }" containerID=d0e041d338e3cc8d5352ab55b9c120395af3990d804bda3b54901da8eaf7870d datapathConfiguration="&{false false false false false }" interface=lxc9e2c08cbbe06 k8sPodName=local-path-storage/helper-pod-create-pvc-0280ab78-ce0c-4dfa-a0a2-eeb0220f9dec labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0e041d338 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0280ab78-ce0c-4dfa-a0a2-eeb0220f9dec subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0e041d338 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0280ab78-ce0c-4dfa-a0a2-eeb0220f9dec subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d0e041d338 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 identity=17181 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0280ab78-ce0c-4dfa-a0a2-eeb0220f9dec oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0e041d338 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 identity=17181 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0280ab78-ce0c-4dfa-a0a2-eeb0220f9dec subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d0e041d338 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=473 identity=17181 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0280ab78-ce0c-4dfa-a0a2-eeb0220f9dec subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0e041d338 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=473 identity=17181 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0280ab78-ce0c-4dfa-a0a2-eeb0220f9dec subsys=daemon level=info msg="Delete endpoint request" containerID=d0e041d338 endpointID=473 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0280ab78-ce0c-4dfa-a0a2-eeb0220f9dec subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d0e041d338 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=473 identity=17181 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0280ab78-ce0c-4dfa-a0a2-eeb0220f9dec subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 087e8e85-c724-4bfe-a230-51b7e95e190e default }" containerID=1d498dce20f90892148212c4b388171d3c130597ea521a96244f87efc3be4258 datapathConfiguration="&{false false false false false }" interface=lxc517867f33cd6 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d498dce20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d498dce20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1d498dce20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.220 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d498dce20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identity=54594 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d498dce20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identity=54594 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d498dce20 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3418 identity=54594 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d498dce20 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3418 identity=54594 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=76470535-6eb1-47f8-8236-cb39df845ad5] Description:}]" policyAddRequest=4033bb4b-6ece-4d5a-b526-9020023a346b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=4033bb4b-6ece-4d5a-b526-9020023a346b policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.250 1c40f6c2-3992-4535-b0b6-4d1dbe4af360 default }" containerID=c299e7a17395d6849c204e64be955b7c8d4d660ebe3e0bdd19474296a3e12eec datapathConfiguration="&{false false false false false }" interface=lxcc0081d96bc84 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c299e7a173 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2862 ipv4=10.0.0.250 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c299e7a173 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2862 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.250 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c299e7a173 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2862 identity=11378 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.250 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c299e7a173 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2862 identity=11378 ipv4=10.0.0.250 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c299e7a173 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2862 identity=11378 ipv4=10.0.0.250 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c299e7a173 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2862 identity=11378 ipv4=10.0.0.250 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010162051753757085 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.235 a945e0fb-a32c-42f1-9965-6e978e5e33d5 default }" containerID=44cdadb1203a7b785dad432a973ae5115fd6d74e5c01a2de77e8939c8e086393 datapathConfiguration="&{false false false false false }" interface=lxc515ea3d672f0 k8sPodName=monitoring/node-feature-discovery-worker-kkwf7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44cdadb120 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1919 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kkwf7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44cdadb120 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1919 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kkwf7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44cdadb120 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1919 identity=30090 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kkwf7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44cdadb120 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1919 identity=30090 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kkwf7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 b5f29e9c-a288-47d9-85cb-d8cf0e1fd5b3 default }" containerID=699235968ff02d733fcf65720848ea91a69dd98a1cbe58e4a7157ef15ddbed55 datapathConfiguration="&{false false false false false }" interface=lxc131ed446746e k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l6wns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=699235968f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3544 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l6wns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=699235968f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3544 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l6wns subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=699235968f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3544 identity=7050 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l6wns oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=699235968f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3544 identity=7050 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l6wns subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44cdadb120 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1919 identity=30090 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kkwf7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=44cdadb120 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1919 identity=30090 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kkwf7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.210 66dda79f-85d6-4b65-9d79-faed02703dd9 default }" containerID=896d6d5b5696fc02858c3fcca312b5e7d295054ed5a1e5d1426ed3bae04abf68 datapathConfiguration="&{false false false false false }" interface=lxc1f78bf6ad514 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-d9x85 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=896d6d5b56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3606 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-d9x85 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=896d6d5b56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3606 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-d9x85 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=896d6d5b56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3606 identity=48118 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-d9x85 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=896d6d5b56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3606 identity=48118 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-d9x85 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=699235968f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3544 identity=7050 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l6wns subsys=endpoint level=info msg="Successful endpoint creation" containerID=699235968f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3544 identity=7050 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-l6wns subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=896d6d5b56 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3606 identity=48118 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-d9x85 subsys=endpoint level=info msg="Successful endpoint creation" containerID=896d6d5b56 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3606 identity=48118 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-d9x85 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.133 ed4703e9-99ae-4f87-975c-227abc7d7579 default }" containerID=ecab17f5699b4133710bd8cbdd1adb7b34120b4ca10f35b2b0be68ba81e27256 datapathConfiguration="&{false false false false false }" interface=lxc3f05cb6e0170 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qfmsz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ecab17f569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 ipv4=10.0.0.133 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qfmsz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ecab17f569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.133 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qfmsz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ecab17f569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identity=56957 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.133 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qfmsz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ecab17f569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=838 identity=56957 ipv4=10.0.0.133 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qfmsz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ecab17f569 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=838 identity=56957 ipv4=10.0.0.133 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qfmsz subsys=endpoint level=info msg="Successful endpoint creation" containerID=ecab17f569 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=838 identity=56957 ipv4=10.0.0.133 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qfmsz subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2039 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02039 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02039 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02039 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02039:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2039 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 20d537f8-dfaa-4f9b-ae04-4ee989652ca6 default }" containerID=5e249e314bcb2c8ceb03e3ff864cbd47e7213d64aa8ac4e7f4c5e10cde1e8c74 datapathConfiguration="&{false false false false false }" interface=lxca1be1706dcad k8sPodName=monitoring/kube-prometheus-stack-admission-create-r2ccp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e249e314b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-r2ccp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e249e314b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=121a5ac6-9b38-476c-ace4-d2370fdb3a0c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=121a5ac6-9b38-476c-ace4-d2370fdb3a0c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-r2ccp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=121a5ac6-9b38-476c-ace4-d2370fdb3a0c;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=121a5ac6-9b38-476c-ace4-d2370fdb3a0c;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5e249e314b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identity=60209 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=121a5ac6-9b38-476c-ace4-d2370fdb3a0c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=121a5ac6-9b38-476c-ace4-d2370fdb3a0c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-r2ccp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e249e314b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identity=60209 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-r2ccp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e249e314b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=269 identity=60209 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-r2ccp subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e249e314b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=269 identity=60209 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-r2ccp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5e249e314b endpointID=269 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-r2ccp subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=121a5ac6-9b38-476c-ace4-d2370fdb3a0c k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=121a5ac6-9b38-476c-ace4-d2370fdb3a0c k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=5e249e314b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=269 identity=60209 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-r2ccp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 652e0e65-3195-4712-88fb-b493c5c68c13 default }" containerID=a8481b8a82fb01ac0d103f67fb9b87ff5ae0267134f018967610376f1508401d datapathConfiguration="&{false false false false false }" interface=lxc22ad7ba50a91 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzjqn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8481b8a82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1320 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzjqn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8481b8a82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1320 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzjqn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a8481b8a82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1320 identity=32046 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzjqn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8481b8a82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1320 identity=32046 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzjqn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.212 ab402ace-4663-47de-bd91-03466df3ae6d default }" containerID=4934fbdb627d707a064bee89de8c9c7434cbbdfd95a9a915907d8a86cdb40ed3 datapathConfiguration="&{false false false false false }" interface=lxcef72faaa469e k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-96m92 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4934fbdb62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-96m92 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4934fbdb62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-96m92 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.189 2bd7c79f-a769-4f00-beac-7c4b56884df4 default }" containerID=997b17b4aba05ee25650cce0b9a4f9f77ce4a1318c8c96a7874f15bdbb5057c8 datapathConfiguration="&{false false false false false }" interface=lxca9d732bf47aa k8sPodName=monitoring/kube-prometheus-stack-grafana-5d76cdf7c5-wn9hs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=997b17b4ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2548 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5d76cdf7c5-wn9hs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=997b17b4ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2548 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5d76cdf7c5-wn9hs subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4934fbdb62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 identity=20943 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-96m92 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=4934fbdb62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3947 identity=20943 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-96m92 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=997b17b4ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2548 identity=45643 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5d76cdf7c5-wn9hs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=997b17b4ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2548 identity=45643 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5d76cdf7c5-wn9hs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a8481b8a82 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1320 identity=32046 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzjqn subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8481b8a82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1320 identity=32046 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzjqn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4934fbdb62 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3947 identity=20943 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-96m92 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4934fbdb62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3947 identity=20943 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-96m92 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=997b17b4ab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2548 identity=45643 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5d76cdf7c5-wn9hs subsys=endpoint level=info msg="Successful endpoint creation" containerID=997b17b4ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2548 identity=45643 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5d76cdf7c5-wn9hs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.252 e30b37b6-d649-46fd-a2f3-0cd719889d98 default }" containerID=6dd61cf4e96675170fcb8ab1335ac0a4e4c9720bef24d2fa773653de853c0359 datapathConfiguration="&{false false false false false }" interface=lxc529645a1b07f k8sPodName=monitoring/kube-prometheus-stack-admission-patch-49d9r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6dd61cf4e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-49d9r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6dd61cf4e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=dc74ad7b-9957-4ef7-ae2a-67729c7d2cea,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=dc74ad7b-9957-4ef7-ae2a-67729c7d2cea,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-49d9r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=dc74ad7b-9957-4ef7-ae2a-67729c7d2cea;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=dc74ad7b-9957-4ef7-ae2a-67729c7d2cea;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6dd61cf4e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identity=38503 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=dc74ad7b-9957-4ef7-ae2a-67729c7d2cea,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=dc74ad7b-9957-4ef7-ae2a-67729c7d2cea,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-49d9r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6dd61cf4e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identity=38503 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-49d9r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6dd61cf4e9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=310 identity=38503 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-49d9r subsys=endpoint level=info msg="Successful endpoint creation" containerID=6dd61cf4e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=310 identity=38503 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-49d9r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.192 9bb3d0e5-525d-427e-a129-882f169a540d default }" containerID=30f0273a99d8698df5a55ccd735e7b67dd3c78126921d107651c5c2be17e0188 datapathConfiguration="&{false false false false false }" interface=lxce0a75b2bcea6 k8sPodName=local-path-storage/helper-pod-create-pvc-f323b84c-c4f6-47c4-8f5b-5c386aa077c0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30f0273a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f323b84c-c4f6-47c4-8f5b-5c386aa077c0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30f0273a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f323b84c-c4f6-47c4-8f5b-5c386aa077c0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30f0273a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identity=17181 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f323b84c-c4f6-47c4-8f5b-5c386aa077c0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30f0273a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identity=17181 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f323b84c-c4f6-47c4-8f5b-5c386aa077c0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=30f0273a99 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=320 identity=17181 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f323b84c-c4f6-47c4-8f5b-5c386aa077c0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=30f0273a99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=320 identity=17181 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f323b84c-c4f6-47c4-8f5b-5c386aa077c0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.31 1773b0ea-a4bc-41b0-9129-e17f23cfd9af default }" containerID=145ad61156954aa40a10fe648339913889a9a33c369b6ebe65ea50f4a8de2c25 datapathConfiguration="&{false false false false false }" interface=lxc406cc2166c6a k8sPodName=local-path-storage/helper-pod-create-pvc-0867a690-631a-48fa-b652-36e6b8b42158 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=145ad61156 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0867a690-631a-48fa-b652-36e6b8b42158 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=145ad61156 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0867a690-631a-48fa-b652-36e6b8b42158 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=145ad61156 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identity=17181 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0867a690-631a-48fa-b652-36e6b8b42158 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=145ad61156 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identity=17181 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0867a690-631a-48fa-b652-36e6b8b42158 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=145ad61156 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=135 identity=17181 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0867a690-631a-48fa-b652-36e6b8b42158 subsys=endpoint level=info msg="Successful endpoint creation" containerID=145ad61156 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=135 identity=17181 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0867a690-631a-48fa-b652-36e6b8b42158 subsys=daemon level=info msg="Delete endpoint request" containerID=6dd61cf4e9 endpointID=310 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-49d9r subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=dc74ad7b-9957-4ef7-ae2a-67729c7d2cea k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=dc74ad7b-9957-4ef7-ae2a-67729c7d2cea k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=6dd61cf4e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=310 identity=38503 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-49d9r subsys=endpoint level=info msg="Delete endpoint request" containerID=30f0273a99 endpointID=320 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f323b84c-c4f6-47c4-8f5b-5c386aa077c0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=145ad61156 endpointID=135 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0867a690-631a-48fa-b652-36e6b8b42158 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=30f0273a99 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=320 identity=17181 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f323b84c-c4f6-47c4-8f5b-5c386aa077c0 subsys=endpoint level=info msg="Removed endpoint" containerID=145ad61156 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=135 identity=17181 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0867a690-631a-48fa-b652-36e6b8b42158 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 ab6b4cc6-88eb-412b-97a4-2a29600997de default }" containerID=fcac43c7fdfb5fa28dfed2cd0dea3521925e3693467c2a79c39e77131b8760be datapathConfiguration="&{false false false false false }" interface=lxc148b35485ec9 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fcac43c7fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4027 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fcac43c7fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4027 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fcac43c7fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4027 identity=49835 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fcac43c7fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4027 identity=49835 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fcac43c7fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4027 identity=49835 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fcac43c7fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4027 identity=49835 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.125 47f054ad-fedc-4f15-a5e2-ff3f3ef54ff7 default }" containerID=311b9ffd52d2fb2992a6c508b7f0dc3c1158e222d82ef63696622d8a2e3342e0 datapathConfiguration="&{false false false false false }" interface=lxc25509f1df526 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=311b9ffd52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=311b9ffd52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=311b9ffd52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identity=7607 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=311b9ffd52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identity=7607 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=311b9ffd52 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=879 identity=7607 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=311b9ffd52 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=879 identity=7607 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.27 0d237a22-f476-4dc8-aeb4-dc8def7d6656 default }" containerID=abc8766c9127fee5480d3cb14e3671e6fa4f17044078bcc503dcfcc6fe4b7839 datapathConfiguration="&{false false false false false }" interface=lxcf8c48e8e9d21 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abc8766c91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abc8766c91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abc8766c91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identity=42918 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=abc8766c91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identity=42918 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 d9e866e4-9260-4acb-9301-fff300d7a35a default }" containerID=a89a3425d62c1a9363bd0b318d5aa71c225f91183c1359d6b3c3d5eed2c16202 datapathConfiguration="&{false false false false false }" interface=lxc2ae6506e297b k8sPodName=monitoring/loki-gateway-cf54cb88c-v57qm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a89a3425d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3043 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-v57qm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a89a3425d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3043 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-v57qm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a89a3425d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3043 identity=45364 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-v57qm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a89a3425d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3043 identity=45364 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-v57qm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=abc8766c91 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=735 identity=42918 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=abc8766c91 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=735 identity=42918 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a89a3425d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3043 identity=45364 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-v57qm subsys=endpoint level=info msg="Successful endpoint creation" containerID=a89a3425d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3043 identity=45364 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-v57qm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.90 4af2fecb-42af-4237-a2fb-1df8c0f3e864 default }" containerID=8d097393019cab95af2438bb04e2b891e1593b87f2df8c3c1afdf65dc46b87a0 datapathConfiguration="&{false false false false false }" interface=lxc402b340c714c k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d09739301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2192 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d09739301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2192 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d09739301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2192 identity=39929 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d09739301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2192 identity=39929 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d09739301 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2192 identity=39929 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d09739301 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2192 identity=39929 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.71 61078d86-eaa4-42a5-b771-b740c5217123 default }" containerID=ff6ec13b5fd1e69ddef8edde71305cd1241f5834a93cb5340c013ca0e530c84f datapathConfiguration="&{false false false false false }" interface=lxcce49a05c70f3 k8sPodName=local-path-storage/helper-pod-create-pvc-652c0838-d071-4117-96af-f58aed37a4a9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff6ec13b5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-652c0838-d071-4117-96af-f58aed37a4a9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff6ec13b5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-652c0838-d071-4117-96af-f58aed37a4a9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff6ec13b5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 identity=17181 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-652c0838-d071-4117-96af-f58aed37a4a9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff6ec13b5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 identity=17181 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-652c0838-d071-4117-96af-f58aed37a4a9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff6ec13b5f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1813 identity=17181 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-652c0838-d071-4117-96af-f58aed37a4a9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff6ec13b5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1813 identity=17181 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-652c0838-d071-4117-96af-f58aed37a4a9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.149 395937c8-d663-4c1c-8687-02f66c363f70 default }" containerID=c2beba5c5dfebdc88e8e9437ba4f0684b16176b096f0e22a4d95eb6a96d45747 datapathConfiguration="&{false false false false false }" interface=lxc370157d7c048 k8sPodName=monitoring/vector-gch88 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2beba5c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/vector-gch88 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2beba5c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/vector-gch88 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2beba5c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 identity=19535 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/vector-gch88 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2beba5c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 identity=19535 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/vector-gch88 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c2beba5c5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=609 identity=19535 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/vector-gch88 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2beba5c5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=609 identity=19535 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/vector-gch88 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ff6ec13b5f endpointID=1813 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-652c0838-d071-4117-96af-f58aed37a4a9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ff6ec13b5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1813 identity=17181 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-652c0838-d071-4117-96af-f58aed37a4a9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 366b2b42-c1e0-492d-b28f-fd1052f1ff8e default }" containerID=5c85ff92e2fb6d7b9c86a7aad1f0fa30b05652abb6644321a3dbb57a56ead307 datapathConfiguration="&{false false false false false }" interface=lxc773714aa430a k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c85ff92e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c85ff92e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c85ff92e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 identity=9306 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c85ff92e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 identity=9306 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5c85ff92e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1630 identity=9306 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c85ff92e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1630 identity=9306 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.172 8f8ff4fb-2904-4112-adcf-6786f5ed5a7c default }" containerID=39afe14b7edfc6a250553333823c0094ea1c478ac35363c5b42c7de6885e8fa8 datapathConfiguration="&{false false false false false }" interface=lxccc740752f1a5 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-p6dcg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39afe14b7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2853 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-p6dcg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39afe14b7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2853 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-p6dcg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39afe14b7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2853 identity=39443 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-p6dcg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39afe14b7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2853 identity=39443 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-p6dcg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39afe14b7e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2853 identity=39443 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-p6dcg subsys=endpoint level=info msg="Successful endpoint creation" containerID=39afe14b7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2853 identity=39443 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-p6dcg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.16 9c1ca6eb-79c1-400d-9e22-957b4cd7ae70 default }" containerID=809723163c55888080f773c1c1ebb5c9a3d7446d248f175d5e896ecd8cb84ada datapathConfiguration="&{false false false false false }" interface=lxc1af9e275add6 k8sPodName=openstack/memcached-memcached-6479589586-sz8jf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=809723163c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sz8jf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=809723163c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sz8jf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=809723163c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 identity=12715 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sz8jf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=809723163c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 identity=12715 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sz8jf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=809723163c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3896 identity=12715 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sz8jf subsys=endpoint level=info msg="Successful endpoint creation" containerID=809723163c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3896 identity=12715 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sz8jf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.46 f20ac20e-f84e-4839-ac1a-b61d8f6e69b0 default }" containerID=98037988e145a8751c01b846e936c089b5388269a6d1a143e50d6dba000a8447 datapathConfiguration="&{false false false false false }" interface=lxc792dafa05ff2 k8sPodName=local-path-storage/helper-pod-create-pvc-4ed933a6-0bbb-478d-8952-5191f9b98036 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98037988e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ed933a6-0bbb-478d-8952-5191f9b98036 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98037988e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ed933a6-0bbb-478d-8952-5191f9b98036 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98037988e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identity=17181 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ed933a6-0bbb-478d-8952-5191f9b98036 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98037988e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identity=17181 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ed933a6-0bbb-478d-8952-5191f9b98036 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98037988e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=154 identity=17181 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ed933a6-0bbb-478d-8952-5191f9b98036 subsys=endpoint level=info msg="Successful endpoint creation" containerID=98037988e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=154 identity=17181 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ed933a6-0bbb-478d-8952-5191f9b98036 subsys=daemon level=info msg="Delete endpoint request" containerID=98037988e1 endpointID=154 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4ed933a6-0bbb-478d-8952-5191f9b98036 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=98037988e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=154 identity=17181 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ed933a6-0bbb-478d-8952-5191f9b98036 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 ac935f3a-a87c-4149-a19e-fcd01f538056 default }" containerID=4dabb74f68d51a9e8a07a2566f701fa4320ff219ac3cd5d74ef327198ebdfdcb datapathConfiguration="&{false false false false false }" interface=lxc475b382e42ad k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4dabb74f68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3262 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4dabb74f68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3262 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4dabb74f68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3262 identity=40165 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4dabb74f68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3262 identity=40165 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4dabb74f68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3262 identity=40165 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4dabb74f68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3262 identity=40165 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.126 40926d2b-cfc6-4a39-bdc1-6509e148ec38 default }" containerID=598a7749a2b26dd4d26b7537b6e41230c9d21039f5bf036e3335bf8f22cdc1c9 datapathConfiguration="&{false false false false false }" interface=lxcab91e985b6e1 k8sPodName=openstack/keystone-api-8f998dfb5-6s5qv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=598a7749a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-api-8f998dfb5-6s5qv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=598a7749a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-api-8f998dfb5-6s5qv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=598a7749a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=49615 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-api-8f998dfb5-6s5qv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=598a7749a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=49615 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-api-8f998dfb5-6s5qv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.38 53e06ed9-8217-4d4b-bc23-b4b68b4cc709 default }" containerID=8f00e2523f50d4159fb0ff7598f4e8b2e3a896f8ae2091423d2d84f7e1aa6ad5 datapathConfiguration="&{false false false false false }" interface=lxc2cc619aa84ca k8sPodName=openstack/keystone-credential-setup-7b8qg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f00e2523f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=633 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-7b8qg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f00e2523f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=633 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a84d621c-be13-47dc-bcd4-be0d42f494ba,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=a84d621c-be13-47dc-bcd4-be0d42f494ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-7b8qg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a84d621c-be13-47dc-bcd4-be0d42f494ba;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=a84d621c-be13-47dc-bcd4-be0d42f494ba;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f00e2523f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=633 identity=4348 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a84d621c-be13-47dc-bcd4-be0d42f494ba,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=a84d621c-be13-47dc-bcd4-be0d42f494ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-7b8qg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f00e2523f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=633 identity=4348 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-7b8qg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=598a7749a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=653 identity=49615 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-api-8f998dfb5-6s5qv subsys=endpoint level=info msg="Successful endpoint creation" containerID=598a7749a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=653 identity=49615 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-api-8f998dfb5-6s5qv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8f00e2523f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=633 identity=4348 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-7b8qg subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f00e2523f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=633 identity=4348 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-7b8qg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8f00e2523f endpointID=633 k8sNamespace=openstack k8sPodName=keystone-credential-setup-7b8qg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a84d621c-be13-47dc-bcd4-be0d42f494ba k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=a84d621c-be13-47dc-bcd4-be0d42f494ba k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8f00e2523f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=633 identity=4348 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-7b8qg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 e35a3ad9-46b1-4f98-b7c4-00d37530d808 default }" containerID=478fa4e2fe7d8d5d1e66059c7a24e9f66cf38dea03d01af24cd075f060f90a86 datapathConfiguration="&{false false false false false }" interface=lxc4ff419b15725 k8sPodName=openstack/keystone-db-init-n699h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=478fa4e2fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3827 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-db-init-n699h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=478fa4e2fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3827 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bde3fa0e-c025-4e67-8db8-3ee19c39ac2a,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=bde3fa0e-c025-4e67-8db8-3ee19c39ac2a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-db-init-n699h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bde3fa0e-c025-4e67-8db8-3ee19c39ac2a;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=bde3fa0e-c025-4e67-8db8-3ee19c39ac2a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=478fa4e2fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3827 identity=21295 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bde3fa0e-c025-4e67-8db8-3ee19c39ac2a,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=bde3fa0e-c025-4e67-8db8-3ee19c39ac2a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-db-init-n699h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=478fa4e2fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3827 identity=21295 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-db-init-n699h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=478fa4e2fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3827 identity=21295 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-db-init-n699h subsys=endpoint level=info msg="Successful endpoint creation" containerID=478fa4e2fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3827 identity=21295 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-db-init-n699h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=478fa4e2fe endpointID=3827 k8sNamespace=openstack k8sPodName=keystone-db-init-n699h subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bde3fa0e-c025-4e67-8db8-3ee19c39ac2a k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=bde3fa0e-c025-4e67-8db8-3ee19c39ac2a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=478fa4e2fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3827 identity=21295 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-db-init-n699h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 4ccdb775-e156-487b-b79b-d7a8708f66b8 default }" containerID=942ed844f321364682d34edfbbc22da820de604b73ea3fda5d9ac101219f92f8 datapathConfiguration="&{false false false false false }" interface=lxc58409e7691f1 k8sPodName=openstack/keystone-fernet-setup-xpqg7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=942ed844f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3562 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-fernet-setup-xpqg7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=942ed844f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3562 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f1b54365-8279-4a33-bff0-c49603837949,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=f1b54365-8279-4a33-bff0-c49603837949,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-fernet-setup-xpqg7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=942ed844f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3562 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-fernet-setup-xpqg7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f1b54365-8279-4a33-bff0-c49603837949;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=f1b54365-8279-4a33-bff0-c49603837949;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=942ed844f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3562 identity=13995 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f1b54365-8279-4a33-bff0-c49603837949,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=f1b54365-8279-4a33-bff0-c49603837949,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-fernet-setup-xpqg7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=942ed844f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3562 identity=13995 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-fernet-setup-xpqg7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=942ed844f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3562 identity=13995 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-fernet-setup-xpqg7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=942ed844f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3562 identity=13995 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-fernet-setup-xpqg7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=942ed844f3 endpointID=3562 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-xpqg7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f1b54365-8279-4a33-bff0-c49603837949 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=f1b54365-8279-4a33-bff0-c49603837949 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=942ed844f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3562 identity=13995 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-fernet-setup-xpqg7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 09a01db0-aa10-4404-b727-b148cc70e55f default }" containerID=cd40cabb600d01189299f387a7d3ab22fe35940224282459a29343f1404ea4cb datapathConfiguration="&{false false false false false }" interface=lxc5bfa12ffa726 k8sPodName=openstack/keystone-db-sync-7rkzh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd40cabb60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2113 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-db-sync-7rkzh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd40cabb60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2113 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1289c1d6-812d-4055-a65d-df9d02cdb5fc,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=1289c1d6-812d-4055-a65d-df9d02cdb5fc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-db-sync-7rkzh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1289c1d6-812d-4055-a65d-df9d02cdb5fc;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=1289c1d6-812d-4055-a65d-df9d02cdb5fc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd40cabb60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2113 identity=33758 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1289c1d6-812d-4055-a65d-df9d02cdb5fc,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=1289c1d6-812d-4055-a65d-df9d02cdb5fc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-db-sync-7rkzh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd40cabb60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2113 identity=33758 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-db-sync-7rkzh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cd40cabb60 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2113 identity=33758 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-db-sync-7rkzh subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd40cabb60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2113 identity=33758 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-db-sync-7rkzh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cd40cabb60 endpointID=2113 k8sNamespace=openstack k8sPodName=keystone-db-sync-7rkzh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1289c1d6-812d-4055-a65d-df9d02cdb5fc k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=1289c1d6-812d-4055-a65d-df9d02cdb5fc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=cd40cabb60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2113 identity=33758 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-db-sync-7rkzh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 50e29644-b36b-45a2-95d5-0c4f93fe038d default }" containerID=897248f34ef0a6ffadb72aa708ba369332701e693aeadd267bb0433a415155af datapathConfiguration="&{false false false false false }" interface=lxc81f3bec15825 k8sPodName=openstack/keystone-rabbit-init-zczq4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=897248f34e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-rabbit-init-zczq4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=897248f34e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4b887274-78cd-410f-8f4b-b6239b933e56,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4b887274-78cd-410f-8f4b-b6239b933e56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-rabbit-init-zczq4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4b887274-78cd-410f-8f4b-b6239b933e56;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4b887274-78cd-410f-8f4b-b6239b933e56;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=897248f34e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 identity=2677 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4b887274-78cd-410f-8f4b-b6239b933e56,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4b887274-78cd-410f-8f4b-b6239b933e56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-rabbit-init-zczq4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=897248f34e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 identity=2677 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-rabbit-init-zczq4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=897248f34e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1741 identity=2677 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-rabbit-init-zczq4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=897248f34e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1741 identity=2677 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-rabbit-init-zczq4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=897248f34e endpointID=1741 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-zczq4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4b887274-78cd-410f-8f4b-b6239b933e56 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4b887274-78cd-410f-8f4b-b6239b933e56 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=897248f34e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1741 identity=2677 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-rabbit-init-zczq4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 405f75ba-272e-4054-91fb-bab14ab60f1f default }" containerID=d88f10b436be169d7812e5f19385326a7c2b9ae988bebfc147a56f338f1b6945 datapathConfiguration="&{false false false false false }" interface=lxc965d5c2d3cca k8sPodName=openstack/keystone-domain-manage-92547 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d88f10b436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-domain-manage-92547 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d88f10b436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4576c5e3-895b-4025-ad6b-e762f16610d2,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=4576c5e3-895b-4025-ad6b-e762f16610d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-domain-manage-92547 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4576c5e3-895b-4025-ad6b-e762f16610d2;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=4576c5e3-895b-4025-ad6b-e762f16610d2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d88f10b436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 identity=12163 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4576c5e3-895b-4025-ad6b-e762f16610d2,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=4576c5e3-895b-4025-ad6b-e762f16610d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-domain-manage-92547 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d88f10b436 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 identity=12163 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-domain-manage-92547 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d88f10b436 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1874 identity=12163 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-domain-manage-92547 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d88f10b436 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1874 identity=12163 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-domain-manage-92547 subsys=daemon level=info msg="Delete endpoint request" containerID=d88f10b436 endpointID=1874 k8sNamespace=openstack k8sPodName=keystone-domain-manage-92547 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4576c5e3-895b-4025-ad6b-e762f16610d2 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=4576c5e3-895b-4025-ad6b-e762f16610d2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d88f10b436 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1874 identity=12163 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-domain-manage-92547 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 2daeffa3-640d-4d5b-a934-9265ce29ca3f default }" containerID=eafa57ede9cf5ca18e1d9fa2ac37ea3e595dfb573d7819186e097bbca03fe211 datapathConfiguration="&{false false false false false }" interface=lxc307890ef2000 k8sPodName=openstack/keystone-bootstrap-rlsww labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eafa57ede9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-rlsww subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eafa57ede9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=57d4bd8c-32cb-4435-82e7-e7a9b306a510,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=57d4bd8c-32cb-4435-82e7-e7a9b306a510,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-rlsww subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=57d4bd8c-32cb-4435-82e7-e7a9b306a510;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=57d4bd8c-32cb-4435-82e7-e7a9b306a510;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eafa57ede9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 identity=1675 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=57d4bd8c-32cb-4435-82e7-e7a9b306a510,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=57d4bd8c-32cb-4435-82e7-e7a9b306a510,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-rlsww oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eafa57ede9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2446 identity=1675 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-rlsww subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=eafa57ede9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2446 identity=1675 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-rlsww subsys=endpoint level=info msg="Successful endpoint creation" containerID=eafa57ede9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2446 identity=1675 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-rlsww subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eafa57ede9 endpointID=2446 k8sNamespace=openstack k8sPodName=keystone-bootstrap-rlsww subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=57d4bd8c-32cb-4435-82e7-e7a9b306a510 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=57d4bd8c-32cb-4435-82e7-e7a9b306a510 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=eafa57ede9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2446 identity=1675 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-rlsww subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 e0a4a467-3503-4be7-94c0-5cfbaed7f6aa default }" containerID=e55e851298ee18b15ac10bacc560c49e3e1c93b2b5886d8737d90a860b9c49b2 datapathConfiguration="&{false false false false false }" interface=lxc3a8d657765b7 k8sPodName=local-path-storage/helper-pod-create-pvc-bb12122a-de0f-41cc-b952-e75c21556b89 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e55e851298 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3094 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb12122a-de0f-41cc-b952-e75c21556b89 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e55e851298 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3094 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb12122a-de0f-41cc-b952-e75c21556b89 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e55e851298 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3094 identity=17181 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb12122a-de0f-41cc-b952-e75c21556b89 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e55e851298 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3094 identity=17181 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb12122a-de0f-41cc-b952-e75c21556b89 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e55e851298 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3094 identity=17181 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb12122a-de0f-41cc-b952-e75c21556b89 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e55e851298 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3094 identity=17181 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb12122a-de0f-41cc-b952-e75c21556b89 subsys=daemon level=info msg="Delete endpoint request" containerID=e55e851298 endpointID=3094 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bb12122a-de0f-41cc-b952-e75c21556b89 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e55e851298 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3094 identity=17181 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb12122a-de0f-41cc-b952-e75c21556b89 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 775fc32f-5a4f-4772-818e-a5111769542d default }" containerID=89a4c2450c8cd4030af4528aaa6e5f99dcb05ea50da058f97ffcb576ac0c3f71 datapathConfiguration="&{false false false false false }" interface=lxc3d42472580ad k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89a4c2450c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=361 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89a4c2450c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=361 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=89a4c2450c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=361 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89a4c2450c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=361 identity=48146 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89a4c2450c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=361 identity=48146 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89a4c2450c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=361 identity=48146 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=89a4c2450c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=361 identity=48146 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.137 afd11e73-a937-4af8-893f-b69235c2a928 default }" containerID=cad30542b827d344b09160db14140b024beb07a853d5a62086ba1f365ea9c396 datapathConfiguration="&{false false false false false }" interface=lxcdcdf501a37cb k8sPodName=openstack/barbican-api-79d95d684c-n2nvk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cad30542b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-79d95d684c-n2nvk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cad30542b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-79d95d684c-n2nvk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cad30542b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-79d95d684c-n2nvk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cad30542b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=13506 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-79d95d684c-n2nvk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cad30542b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=13506 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-79d95d684c-n2nvk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 bf9a70e0-8952-437d-870c-b73b3ea76ab9 default }" containerID=2855a307600e2fad80e4f1add0d243eeb83061adcb7a49e98ac27978d4830b49 datapathConfiguration="&{false false false false false }" interface=lxcaa25617fad4e k8sPodName=openstack/barbican-db-init-wbpkq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2855a30760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1342 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-wbpkq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2855a30760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1342 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0475f560-e30a-485f-983d-fde3a6b2954a,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=0475f560-e30a-485f-983d-fde3a6b2954a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-wbpkq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0475f560-e30a-485f-983d-fde3a6b2954a;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=0475f560-e30a-485f-983d-fde3a6b2954a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2855a30760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1342 identity=10594 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0475f560-e30a-485f-983d-fde3a6b2954a,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=0475f560-e30a-485f-983d-fde3a6b2954a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-wbpkq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2855a30760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1342 identity=10594 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-wbpkq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cad30542b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=29 identity=13506 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-79d95d684c-n2nvk subsys=endpoint level=info msg="Successful endpoint creation" containerID=cad30542b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=29 identity=13506 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-79d95d684c-n2nvk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2855a30760 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1342 identity=10594 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-wbpkq subsys=endpoint level=info msg="Successful endpoint creation" containerID=2855a30760 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1342 identity=10594 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-wbpkq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2855a30760 endpointID=1342 k8sNamespace=openstack k8sPodName=barbican-db-init-wbpkq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0475f560-e30a-485f-983d-fde3a6b2954a k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=0475f560-e30a-485f-983d-fde3a6b2954a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2855a30760 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1342 identity=10594 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-wbpkq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 24622f19-e9af-43f0-afaa-00e5c6840b16 default }" containerID=d9aff9b1deca74e9eaf627afe8eb153947aacd8ca7fdbf703c6b1ce827ba8e50 datapathConfiguration="&{false false false false false }" interface=lxc28c36f03a193 k8sPodName=openstack/barbican-db-sync-2t54r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9aff9b1de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-db-sync-2t54r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9aff9b1de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=89181b70-9718-41e4-87e2-24b64426dce9,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=89181b70-9718-41e4-87e2-24b64426dce9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-db-sync-2t54r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=89181b70-9718-41e4-87e2-24b64426dce9;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=89181b70-9718-41e4-87e2-24b64426dce9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9aff9b1de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 identity=37140 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=89181b70-9718-41e4-87e2-24b64426dce9,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=89181b70-9718-41e4-87e2-24b64426dce9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-db-sync-2t54r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9aff9b1de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 identity=37140 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-db-sync-2t54r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d9aff9b1de datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=628 identity=37140 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-db-sync-2t54r subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9aff9b1de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=628 identity=37140 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-db-sync-2t54r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d9aff9b1de endpointID=628 k8sNamespace=openstack k8sPodName=barbican-db-sync-2t54r subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=89181b70-9718-41e4-87e2-24b64426dce9 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=89181b70-9718-41e4-87e2-24b64426dce9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d9aff9b1de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=628 identity=37140 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-db-sync-2t54r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 f87c1c91-e419-4b48-ac77-d8b8738395b5 default }" containerID=9f2519c127ffec730fd610a7d2883b44d117c70b54eeee046f8c69fb980075fe datapathConfiguration="&{false false false false false }" interface=lxc4018a18247ca k8sPodName=openstack/barbican-rabbit-init-6gbpt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f2519c127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=607 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-rabbit-init-6gbpt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f2519c127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=607 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=838fbbde-2542-450b-8ca6-0ed395f746ad,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=838fbbde-2542-450b-8ca6-0ed395f746ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-rabbit-init-6gbpt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=838fbbde-2542-450b-8ca6-0ed395f746ad;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=838fbbde-2542-450b-8ca6-0ed395f746ad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f2519c127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=607 identity=22075 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=838fbbde-2542-450b-8ca6-0ed395f746ad,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=838fbbde-2542-450b-8ca6-0ed395f746ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-rabbit-init-6gbpt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f2519c127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=607 identity=22075 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-rabbit-init-6gbpt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f2519c127 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=607 identity=22075 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-rabbit-init-6gbpt subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f2519c127 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=607 identity=22075 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-rabbit-init-6gbpt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f2519c127 endpointID=607 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-6gbpt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=838fbbde-2542-450b-8ca6-0ed395f746ad k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=838fbbde-2542-450b-8ca6-0ed395f746ad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9f2519c127 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=607 identity=22075 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-rabbit-init-6gbpt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 df6c0edc-3a51-43e6-958e-1378338d3bf8 default }" containerID=980d63dc12e20cd5c6ba3cd4cd5fa32411b226c68f9c2c66766caae5afaa5636 datapathConfiguration="&{false false false false false }" interface=lxcf023b8743edd k8sPodName=openstack/barbican-ks-service-r9sth labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=980d63dc12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-service-r9sth subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=980d63dc12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1e9ab9c9-d4db-4eb2-bf23-319e39325feb,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=1e9ab9c9-d4db-4eb2-bf23-319e39325feb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-service-r9sth subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1e9ab9c9-d4db-4eb2-bf23-319e39325feb;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=1e9ab9c9-d4db-4eb2-bf23-319e39325feb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=980d63dc12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 identity=4230 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1e9ab9c9-d4db-4eb2-bf23-319e39325feb,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=1e9ab9c9-d4db-4eb2-bf23-319e39325feb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-service-r9sth oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=980d63dc12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 identity=4230 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-service-r9sth subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=980d63dc12 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=700 identity=4230 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-service-r9sth subsys=endpoint level=info msg="Successful endpoint creation" containerID=980d63dc12 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=700 identity=4230 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-service-r9sth subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036153908585496504 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=980d63dc12 endpointID=700 k8sNamespace=openstack k8sPodName=barbican-ks-service-r9sth subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1e9ab9c9-d4db-4eb2-bf23-319e39325feb k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=1e9ab9c9-d4db-4eb2-bf23-319e39325feb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=980d63dc12 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=700 identity=4230 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-service-r9sth subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 eea9094a-c7b2-4c7e-b388-5b0ed54dd4d6 default }" containerID=553cf1edd14c976a418db74429c9e7e432e8a9902a02cf995903e53515e8851f datapathConfiguration="&{false false false false false }" interface=lxc4d524af4a354 k8sPodName=openstack/barbican-ks-endpoints-v2bpf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=553cf1edd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3571 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v2bpf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=553cf1edd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3571 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fe81ac58-5dac-42ed-bf49-ad3f65ecac1c,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=fe81ac58-5dac-42ed-bf49-ad3f65ecac1c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v2bpf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=fe81ac58-5dac-42ed-bf49-ad3f65ecac1c;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=fe81ac58-5dac-42ed-bf49-ad3f65ecac1c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=553cf1edd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3571 identity=47780 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fe81ac58-5dac-42ed-bf49-ad3f65ecac1c,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=fe81ac58-5dac-42ed-bf49-ad3f65ecac1c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v2bpf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=553cf1edd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3571 identity=47780 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v2bpf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=553cf1edd1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3571 identity=47780 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v2bpf subsys=endpoint level=info msg="Successful endpoint creation" containerID=553cf1edd1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3571 identity=47780 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v2bpf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=553cf1edd1 endpointID=3571 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-v2bpf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=fe81ac58-5dac-42ed-bf49-ad3f65ecac1c k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=fe81ac58-5dac-42ed-bf49-ad3f65ecac1c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=553cf1edd1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3571 identity=47780 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v2bpf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 bd6c3c49-eabc-4c84-9915-c978031c1ad9 default }" containerID=cf0d76a3538ae29d227e42083914ca832b5b1a7258f6a1ff8506909a171990e6 datapathConfiguration="&{false false false false false }" interface=lxc263e1b666912 k8sPodName=openstack/barbican-ks-user-zfwtl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf0d76a353 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=79 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-user-zfwtl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf0d76a353 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=79 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=53a5e3b6-4306-4f72-ab0c-d1ef69a57efa,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=53a5e3b6-4306-4f72-ab0c-d1ef69a57efa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-user-zfwtl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=53a5e3b6-4306-4f72-ab0c-d1ef69a57efa;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=53a5e3b6-4306-4f72-ab0c-d1ef69a57efa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf0d76a353 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=79 identity=34369 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=53a5e3b6-4306-4f72-ab0c-d1ef69a57efa,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=53a5e3b6-4306-4f72-ab0c-d1ef69a57efa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-user-zfwtl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf0d76a353 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=79 identity=34369 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-user-zfwtl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cf0d76a353 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=79 identity=34369 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-user-zfwtl subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf0d76a353 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=79 identity=34369 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-user-zfwtl subsys=daemon level=info msg="Delete endpoint request" containerID=cf0d76a353 endpointID=79 k8sNamespace=openstack k8sPodName=barbican-ks-user-zfwtl subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=53a5e3b6-4306-4f72-ab0c-d1ef69a57efa k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=53a5e3b6-4306-4f72-ab0c-d1ef69a57efa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=cf0d76a353 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=79 identity=34369 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-ks-user-zfwtl subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.146 456b7f7f-0c7c-4cad-bda1-beafd7cdee82 default }" containerID=497bda6d328067dd9632ed285afc3e183593f864228fbb34ee84898b48ced8f8 datapathConfiguration="&{false false false false false }" interface=lxcccc249aca651 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxpr6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=497bda6d32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1638 ipv4=10.0.0.146 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxpr6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=497bda6d32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1638 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.146 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxpr6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=497bda6d32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1638 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.146 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxpr6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=497bda6d32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1638 identity=57238 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.146 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxpr6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=497bda6d32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1638 identity=57238 ipv4=10.0.0.146 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxpr6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=497bda6d32 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1638 identity=57238 ipv4=10.0.0.146 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxpr6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=497bda6d32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1638 identity=57238 ipv4=10.0.0.146 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxpr6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.57 e2dcd3f5-5839-4559-bec8-3fe17e060db5 default }" containerID=1d302bab7baa30e590210f4486c1770a43269cd85a766741e3779695ed3d45ab datapathConfiguration="&{false false false false false }" interface=lxc07d854c3790e k8sPodName=openstack/rook-ceph-detect-version-4trtl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d302bab7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4trtl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d302bab7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=ad6bcbcb-4304-4168-834f-868e7513e4d4,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=ad6bcbcb-4304-4168-834f-868e7513e4d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4trtl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=ad6bcbcb-4304-4168-834f-868e7513e4d4;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=ad6bcbcb-4304-4168-834f-868e7513e4d4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1d302bab7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4trtl line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1d302bab7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 identity=59880 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=ad6bcbcb-4304-4168-834f-868e7513e4d4,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=ad6bcbcb-4304-4168-834f-868e7513e4d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4trtl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d302bab7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 identity=59880 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4trtl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d302bab7b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2391 identity=59880 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4trtl subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d302bab7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2391 identity=59880 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4trtl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1d302bab7b endpointID=2391 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-4trtl subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=ad6bcbcb-4304-4168-834f-868e7513e4d4 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=ad6bcbcb-4304-4168-834f-868e7513e4d4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=1d302bab7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2391 identity=59880 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4trtl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 a2aeed78-5e59-4c06-a3eb-eaca7b2bf6fb default }" containerID=e9a3d3969da3cfb6e7f45ca9f2ec67640880beb5beec50828eb45d0cb93bc56f datapathConfiguration="&{false false false false false }" interface=lxcb49a675a6cc6 k8sPodName=openstack/ceph-object-controller-detect-version-9zbkd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9a3d3969d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9zbkd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9a3d3969d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=dd603041-27cc-43af-bd0b-2114d9801658,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=dd603041-27cc-43af-bd0b-2114d9801658,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9zbkd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=dd603041-27cc-43af-bd0b-2114d9801658;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=dd603041-27cc-43af-bd0b-2114d9801658;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9a3d3969d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identity=55619 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=dd603041-27cc-43af-bd0b-2114d9801658,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=dd603041-27cc-43af-bd0b-2114d9801658,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9zbkd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9a3d3969d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identity=55619 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9zbkd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e9a3d3969d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=387 identity=55619 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9zbkd subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9a3d3969d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=387 identity=55619 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9zbkd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e9a3d3969d endpointID=387 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-9zbkd subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=dd603041-27cc-43af-bd0b-2114d9801658 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=dd603041-27cc-43af-bd0b-2114d9801658 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=e9a3d3969d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=387 identity=55619 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9zbkd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 991b3e4b-086f-4a06-bdf1-ad0c9fedd120 default }" containerID=c41a9260aa490ebfd3093bd1c4c5bfe770f9e9013924646cfd0995a18b712a92 datapathConfiguration="&{false false false false false }" interface=lxc95cbcfb29239 k8sPodName=local-path-storage/helper-pod-create-pvc-909b5656-f3a7-476b-88ef-4393b0710927 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c41a9260aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3330 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-909b5656-f3a7-476b-88ef-4393b0710927 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c41a9260aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3330 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-909b5656-f3a7-476b-88ef-4393b0710927 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c41a9260aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3330 identity=17181 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-909b5656-f3a7-476b-88ef-4393b0710927 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c41a9260aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3330 identity=17181 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-909b5656-f3a7-476b-88ef-4393b0710927 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c41a9260aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3330 identity=17181 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-909b5656-f3a7-476b-88ef-4393b0710927 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c41a9260aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3330 identity=17181 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-909b5656-f3a7-476b-88ef-4393b0710927 subsys=daemon level=info msg="Delete endpoint request" containerID=c41a9260aa endpointID=3330 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-909b5656-f3a7-476b-88ef-4393b0710927 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c41a9260aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3330 identity=17181 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-909b5656-f3a7-476b-88ef-4393b0710927 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 22a098e1-0eda-4207-847c-89e11361a9a3 default }" containerID=1ea2482a2d34155bd84557e367e98f971651eae34f762378d0465bb58b661485 datapathConfiguration="&{false false false false false }" interface=lxc1cd58c726224 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ea2482a2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ea2482a2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ea2482a2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identity=59391 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ea2482a2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identity=59391 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1ea2482a2d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1341 identity=59391 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ea2482a2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1341 identity=59391 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.28 9c6f7cbc-61e6-4a9d-8a41-d23ac1ca0379 default }" containerID=1b694b4389f5ce6fb5eb01a3fbc629fedd961e4e43726bc22658f5e73b671863 datapathConfiguration="&{false false false false false }" interface=lxc26bc398184c1 k8sPodName=openstack/glance-db-init-cchqh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b694b4389 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-db-init-cchqh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b694b4389 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=517d44fa-c285-4933-85a1-b7f950e35409,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=517d44fa-c285-4933-85a1-b7f950e35409,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-db-init-cchqh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=517d44fa-c285-4933-85a1-b7f950e35409;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=517d44fa-c285-4933-85a1-b7f950e35409;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b694b4389 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identity=62105 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=517d44fa-c285-4933-85a1-b7f950e35409,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=517d44fa-c285-4933-85a1-b7f950e35409,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-db-init-cchqh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b694b4389 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identity=62105 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-db-init-cchqh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1b694b4389 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1389 identity=62105 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-db-init-cchqh subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b694b4389 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1389 identity=62105 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-db-init-cchqh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1b694b4389 endpointID=1389 k8sNamespace=openstack k8sPodName=glance-db-init-cchqh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=517d44fa-c285-4933-85a1-b7f950e35409 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=517d44fa-c285-4933-85a1-b7f950e35409 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1b694b4389 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1389 identity=62105 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-db-init-cchqh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 0f79fff8-2387-4a63-a13d-6e4b9ace55c4 default }" containerID=e37046cf5df4a4056f1b22051236b0207ddadedfc555759c8a5495748afad4b0 datapathConfiguration="&{false false false false false }" interface=lxc583b7419511b k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9fj8n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e37046cf5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9fj8n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e37046cf5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9fj8n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e37046cf5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9fj8n line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e37046cf5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 identity=4944 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9fj8n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e37046cf5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 identity=4944 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9fj8n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e37046cf5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2658 identity=4944 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9fj8n subsys=endpoint level=info msg="Successful endpoint creation" containerID=e37046cf5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2658 identity=4944 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9fj8n subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.184 502ef749-cb5c-4966-b7c9-953dbea7d9b0 default }" containerID=eca4035575713aaa93be8061c63b9b5f301f93925e8c8362c4cfccbc9a76e9bc datapathConfiguration="&{false false false false false }" interface=lxc9bd0abf698ab k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rt9h6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eca4035575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rt9h6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eca4035575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rt9h6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eca4035575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 identity=12325 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rt9h6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eca4035575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1454 identity=12325 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rt9h6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eca4035575 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1454 identity=12325 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rt9h6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eca4035575 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1454 identity=12325 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-rt9h6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.57 5ddedc19-b6e4-4c41-a330-224084a50335 default }" containerID=87b6d44e73a8f301f6e5a74811eaf46f480a455c738b1d683601f6a5957050b3 datapathConfiguration="&{false false false false false }" interface=lxcc0d2fb0042a7 k8sPodName=openstack/glance-db-sync-z456p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87b6d44e73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-z456p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87b6d44e73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0a617d86-5a1a-461c-b07f-9f94e41ef334,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=0a617d86-5a1a-461c-b07f-9f94e41ef334,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-z456p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0a617d86-5a1a-461c-b07f-9f94e41ef334;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=0a617d86-5a1a-461c-b07f-9f94e41ef334;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87b6d44e73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 identity=16543 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0a617d86-5a1a-461c-b07f-9f94e41ef334,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=0a617d86-5a1a-461c-b07f-9f94e41ef334,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-z456p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87b6d44e73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 identity=16543 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-z456p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=87b6d44e73 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1606 identity=16543 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-z456p subsys=endpoint level=info msg="Successful endpoint creation" containerID=87b6d44e73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1606 identity=16543 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-z456p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=87b6d44e73 endpointID=1606 k8sNamespace=openstack k8sPodName=glance-db-sync-z456p subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0a617d86-5a1a-461c-b07f-9f94e41ef334 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=0a617d86-5a1a-461c-b07f-9f94e41ef334 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=87b6d44e73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1606 identity=16543 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-db-sync-z456p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 64072fa8-4a33-41cb-a846-d3cf642079ad default }" containerID=0a104c118966c5f5ffab1465ed78212b8a29996b8fecda34136c96a0b5c757cb datapathConfiguration="&{false false false false false }" interface=lxcc787271c5150 k8sPodName=openstack/glance-rabbit-init-bhvgm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a104c1189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-rabbit-init-bhvgm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a104c1189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=93061731-34db-40a9-9646-cc384361003c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=93061731-34db-40a9-9646-cc384361003c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-rabbit-init-bhvgm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0a104c1189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-rabbit-init-bhvgm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=93061731-34db-40a9-9646-cc384361003c;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=93061731-34db-40a9-9646-cc384361003c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a104c1189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 identity=48849 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=93061731-34db-40a9-9646-cc384361003c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=93061731-34db-40a9-9646-cc384361003c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-rabbit-init-bhvgm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a104c1189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 identity=48849 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-rabbit-init-bhvgm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a104c1189 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=728 identity=48849 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-rabbit-init-bhvgm subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a104c1189 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=728 identity=48849 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-rabbit-init-bhvgm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0a104c1189 endpointID=728 k8sNamespace=openstack k8sPodName=glance-rabbit-init-bhvgm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=93061731-34db-40a9-9646-cc384361003c k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=93061731-34db-40a9-9646-cc384361003c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0a104c1189 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=728 identity=48849 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-rabbit-init-bhvgm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 cc884528-f3f6-4996-9193-81911518b7d8 default }" containerID=37336f2411bb2c0440403c3c025a0bcf4c692306b9c6c85f42dc427c0693c5a1 datapathConfiguration="&{false false false false false }" interface=lxc1af5e782d1bc k8sPodName=openstack/glance-ks-service-cg8rx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37336f2411 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1355 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-service-cg8rx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37336f2411 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1355 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1d11597c-d1ec-4878-a859-ff7535269793,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=1d11597c-d1ec-4878-a859-ff7535269793,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-service-cg8rx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1d11597c-d1ec-4878-a859-ff7535269793;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=1d11597c-d1ec-4878-a859-ff7535269793;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=37336f2411 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1355 identity=20625 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1d11597c-d1ec-4878-a859-ff7535269793,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=1d11597c-d1ec-4878-a859-ff7535269793,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-service-cg8rx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37336f2411 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1355 identity=20625 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-service-cg8rx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37336f2411 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1355 identity=20625 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-service-cg8rx subsys=endpoint level=info msg="Successful endpoint creation" containerID=37336f2411 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1355 identity=20625 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-service-cg8rx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=37336f2411 endpointID=1355 k8sNamespace=openstack k8sPodName=glance-ks-service-cg8rx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1d11597c-d1ec-4878-a859-ff7535269793 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=1d11597c-d1ec-4878-a859-ff7535269793 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=37336f2411 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1355 identity=20625 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-service-cg8rx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 3a7e5438-a3ea-45d3-a1b7-9784f0163a5a default }" containerID=74b93be8f290d5aad9c009908767c417d95d99810983ec816a32038b63112e67 datapathConfiguration="&{false false false false false }" interface=lxc9abe0a865fbd k8sPodName=openstack/glance-ks-endpoints-lj2q5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74b93be8f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-endpoints-lj2q5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74b93be8f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0e1be831-c0fc-4115-bc83-bb37d1f295a7,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0e1be831-c0fc-4115-bc83-bb37d1f295a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-endpoints-lj2q5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0e1be831-c0fc-4115-bc83-bb37d1f295a7;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0e1be831-c0fc-4115-bc83-bb37d1f295a7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74b93be8f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 identity=60416 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0e1be831-c0fc-4115-bc83-bb37d1f295a7,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0e1be831-c0fc-4115-bc83-bb37d1f295a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-endpoints-lj2q5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74b93be8f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=968 identity=60416 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-endpoints-lj2q5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=74b93be8f2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=968 identity=60416 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-endpoints-lj2q5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=74b93be8f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=968 identity=60416 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-endpoints-lj2q5 subsys=daemon level=info msg="Delete endpoint request" containerID=74b93be8f2 endpointID=968 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-lj2q5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0e1be831-c0fc-4115-bc83-bb37d1f295a7 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0e1be831-c0fc-4115-bc83-bb37d1f295a7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=74b93be8f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=968 identity=60416 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-endpoints-lj2q5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 987d2900-bb0e-402a-be33-e85c541440a2 default }" containerID=749313c8354c1c419104dcb49891e0c181668d5bfd83b5958bfc97f107a5d0f7 datapathConfiguration="&{false false false false false }" interface=lxcead741c18d17 k8sPodName=openstack/glance-ks-user-wplk7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=749313c835 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-ks-user-wplk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=749313c835 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=db3cabce-93ce-4eae-9837-fb11eb2052df,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=db3cabce-93ce-4eae-9837-fb11eb2052df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-ks-user-wplk7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=db3cabce-93ce-4eae-9837-fb11eb2052df;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=db3cabce-93ce-4eae-9837-fb11eb2052df;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=749313c835 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 identity=4057 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=db3cabce-93ce-4eae-9837-fb11eb2052df,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=db3cabce-93ce-4eae-9837-fb11eb2052df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-ks-user-wplk7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=749313c835 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 identity=4057 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-ks-user-wplk7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=749313c835 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2449 identity=4057 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-ks-user-wplk7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=749313c835 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2449 identity=4057 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-ks-user-wplk7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=749313c835 endpointID=2449 k8sNamespace=openstack k8sPodName=glance-ks-user-wplk7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=db3cabce-93ce-4eae-9837-fb11eb2052df k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=db3cabce-93ce-4eae-9837-fb11eb2052df k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=749313c835 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2449 identity=4057 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-ks-user-wplk7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 df3395a6-eb6c-462b-879c-b7a82fa3ee61 default }" containerID=967c6122b98d8f857c36c4a7674fc6657d63a62d1f5ae3daf612705a98ffe48b datapathConfiguration="&{false false false false false }" interface=lxcecbe7861a637 k8sPodName=openstack/glance-metadefs-load-d5lzj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=967c6122b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-metadefs-load-d5lzj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=967c6122b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9a9cccd5-fbda-440d-8bb9-0b8a0f715a2d,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=9a9cccd5-fbda-440d-8bb9-0b8a0f715a2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-metadefs-load-d5lzj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9a9cccd5-fbda-440d-8bb9-0b8a0f715a2d;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=9a9cccd5-fbda-440d-8bb9-0b8a0f715a2d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=967c6122b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 identity=11358 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9a9cccd5-fbda-440d-8bb9-0b8a0f715a2d,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=9a9cccd5-fbda-440d-8bb9-0b8a0f715a2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-metadefs-load-d5lzj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=967c6122b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 identity=11358 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-metadefs-load-d5lzj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=967c6122b9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1803 identity=11358 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-metadefs-load-d5lzj subsys=endpoint level=info msg="Successful endpoint creation" containerID=967c6122b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1803 identity=11358 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-metadefs-load-d5lzj subsys=daemon level=info msg="Delete endpoint request" containerID=967c6122b9 endpointID=1803 k8sNamespace=openstack k8sPodName=glance-metadefs-load-d5lzj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9a9cccd5-fbda-440d-8bb9-0b8a0f715a2d k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=9a9cccd5-fbda-440d-8bb9-0b8a0f715a2d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=967c6122b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1803 identity=11358 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-metadefs-load-d5lzj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 0b73527e-5eee-4399-9caa-5cb8932e7f1e default }" containerID=9fa80853c72d51a3f233285097aa8fa9d9da2f7c6f0491b367a09a8c12233f17 datapathConfiguration="&{false false false false false }" interface=lxc8a7a4ac023b1 k8sPodName=openstack/glance-storage-init-brnbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9fa80853c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2364 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-storage-init-brnbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9fa80853c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2364 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fbd1b6a2-6d9d-4570-836d-6e1a8b3e0155,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=fbd1b6a2-6d9d-4570-836d-6e1a8b3e0155,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-storage-init-brnbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fbd1b6a2-6d9d-4570-836d-6e1a8b3e0155;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=fbd1b6a2-6d9d-4570-836d-6e1a8b3e0155;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9fa80853c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2364 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-storage-init-brnbb line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9fa80853c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2364 identity=27058 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fbd1b6a2-6d9d-4570-836d-6e1a8b3e0155,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=fbd1b6a2-6d9d-4570-836d-6e1a8b3e0155,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-storage-init-brnbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9fa80853c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2364 identity=27058 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-storage-init-brnbb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9fa80853c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2364 identity=27058 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-storage-init-brnbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=9fa80853c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2364 identity=27058 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-storage-init-brnbb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9fa80853c7 endpointID=2364 k8sNamespace=openstack k8sPodName=glance-storage-init-brnbb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fbd1b6a2-6d9d-4570-836d-6e1a8b3e0155 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=fbd1b6a2-6d9d-4570-836d-6e1a8b3e0155 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9fa80853c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2364 identity=27058 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-storage-init-brnbb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 cbc69aee-c686-4f67-b56e-20af71251899 default }" containerID=fdce7e51159f715aaed9dcdd32e1d1e5123893f89c95b3fbc92dd2866002bc9d datapathConfiguration="&{false false false false false }" interface=lxc605114f0e41d k8sPodName=openstack/glance-api-598cd6488-rmwdh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdce7e5115 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2028 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-598cd6488-rmwdh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdce7e5115 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2028 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-598cd6488-rmwdh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdce7e5115 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2028 identity=15215 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-598cd6488-rmwdh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fdce7e5115 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2028 identity=15215 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-598cd6488-rmwdh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fdce7e5115 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2028 identity=15215 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-598cd6488-rmwdh subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdce7e5115 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2028 identity=15215 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-598cd6488-rmwdh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.225 7e6a7c79-a28a-4423-940b-43c76de3a680 default }" containerID=46093f197f9367087d9e6d7529d839c89b3e85bdd48f9c4ea4d368090e6674f8 datapathConfiguration="&{false false false false false }" interface=lxc5c2f19333a4f k8sPodName=openstack/staffeln-conductor-7d799d9bdc-b7nxn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46093f197f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/staffeln-conductor-7d799d9bdc-b7nxn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46093f197f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/staffeln-conductor-7d799d9bdc-b7nxn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.17 474a91a8-922d-4a57-896f-f27474f0e801 default }" containerID=3c6627c39b4385a7c5a9cfabb695d25310745755a5998c2e8d2f814a4461dbd2 datapathConfiguration="&{false false false false false }" interface=lxc60b0748e4d9f k8sPodName=openstack/staffeln-api-b87f98bb4-kfbwv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c6627c39b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2308 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-api-b87f98bb4-kfbwv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c6627c39b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2308 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-api-b87f98bb4-kfbwv subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46093f197f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 identity=46064 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/staffeln-conductor-7d799d9bdc-b7nxn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46093f197f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3417 identity=46064 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/staffeln-conductor-7d799d9bdc-b7nxn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3c6627c39b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2308 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-api-b87f98bb4-kfbwv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c6627c39b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2308 identity=15728 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-api-b87f98bb4-kfbwv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c6627c39b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2308 identity=15728 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-api-b87f98bb4-kfbwv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46093f197f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3417 identity=46064 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/staffeln-conductor-7d799d9bdc-b7nxn subsys=endpoint level=info msg="Successful endpoint creation" containerID=46093f197f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3417 identity=46064 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/staffeln-conductor-7d799d9bdc-b7nxn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.175 ce94b0ce-44c3-45fb-a514-eaae329cc0bc default }" containerID=548ce61320e6636ca61970fb2454f14fa0d2ece4725961fd3193581929315a91 datapathConfiguration="&{false false false false false }" interface=lxcc9db06acb705 k8sPodName=openstack/staffeln-db-init-2bvh9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=548ce61320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-db-init-2bvh9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=548ce61320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8a0057e4-39ad-482b-8cba-9b44e5eb19cb,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=8a0057e4-39ad-482b-8cba-9b44e5eb19cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-db-init-2bvh9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=8a0057e4-39ad-482b-8cba-9b44e5eb19cb;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=8a0057e4-39ad-482b-8cba-9b44e5eb19cb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=548ce61320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identity=52134 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8a0057e4-39ad-482b-8cba-9b44e5eb19cb,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=8a0057e4-39ad-482b-8cba-9b44e5eb19cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-db-init-2bvh9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=548ce61320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identity=52134 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-db-init-2bvh9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c6627c39b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2308 identity=15728 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-api-b87f98bb4-kfbwv subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c6627c39b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2308 identity=15728 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-api-b87f98bb4-kfbwv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=548ce61320 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1460 identity=52134 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-db-init-2bvh9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=548ce61320 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1460 identity=52134 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-db-init-2bvh9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=548ce61320 endpointID=1460 k8sNamespace=openstack k8sPodName=staffeln-db-init-2bvh9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=8a0057e4-39ad-482b-8cba-9b44e5eb19cb k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=8a0057e4-39ad-482b-8cba-9b44e5eb19cb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=548ce61320 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1460 identity=52134 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-db-init-2bvh9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 f5eb2ed2-6ff8-43f5-865f-72c6ffbf0155 default }" containerID=348f00c2ce5043d2e79673df21f08cb17bf986657f208d445864e7274ddb57b8 datapathConfiguration="&{false false false false false }" interface=lxce568db1f2b12 k8sPodName=openstack/staffeln-db-sync-s2vsf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=348f00c2ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2777 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/staffeln-db-sync-s2vsf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=348f00c2ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2777 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f6f12ecf-03e4-4827-94a7-a8b6d2ccfb25,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f6f12ecf-03e4-4827-94a7-a8b6d2ccfb25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/staffeln-db-sync-s2vsf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=f6f12ecf-03e4-4827-94a7-a8b6d2ccfb25;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=f6f12ecf-03e4-4827-94a7-a8b6d2ccfb25;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=348f00c2ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2777 identity=54921 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f6f12ecf-03e4-4827-94a7-a8b6d2ccfb25,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f6f12ecf-03e4-4827-94a7-a8b6d2ccfb25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/staffeln-db-sync-s2vsf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=348f00c2ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2777 identity=54921 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/staffeln-db-sync-s2vsf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=348f00c2ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2777 identity=54921 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/staffeln-db-sync-s2vsf subsys=endpoint level=info msg="Successful endpoint creation" containerID=348f00c2ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2777 identity=54921 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/staffeln-db-sync-s2vsf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager