level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="894.937µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="44.381µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="975.029µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.98µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=107.713606ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.561µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="17.98µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="57.031µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="59.861µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="68.441µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="537.32µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="6.92µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.465426ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.304218ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="36.381µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="41.451µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="410.008µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="98.362µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="83.302µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=49.757841ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="95.822µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.16µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.34µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.153.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.503315ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="8.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.08484ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="31.471µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=201.131051ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="16.16µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.67µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="6.92µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.51µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="31.481µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="20.861µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="45.031µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="385.098µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="14.1µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="274.705µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.125251ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.734272ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.67µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="18.151µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.153 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.153 ipAddr.ipv6="" k8sNodeIP=199.204.45.153 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.153" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.237" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.153" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.153} {CiliumInternalIP 10.0.0.237}] 10.0.0.0/24 [] [] 10.0.0.217 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:38461" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.439064732s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="20.47µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="37.271µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="62.662µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="22.001µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3265 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3265 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3265 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.980126623s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=289.054442ms file-path=/var/run/cilium/state/templates/934295d173a7125a1a04fac0fc9e97111178bca0ad97071abbbc0e1e154c5714/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3265 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 ipv4=10.0.0.217 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 identityLabels="reserved:health" ipv4=10.0.0.217 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 identity=4 identityLabels="reserved:health" ipv4=10.0.0.217 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 c36b1bca-1a4d-4acb-bbb1-e8b49c648376 default }" containerID=3704ab3aee380fa6594b0d932e726bcfea981f778858826fe22f91f820d99c48 datapathConfiguration="&{false false false false false }" interface=lxcb4d7f224923f k8sPodName=kube-system/coredns-7c96b6546b-h2lfr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3704ab3aee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 ipv4=10.0.0.166 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-h2lfr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3704ab3aee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.166 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-h2lfr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3704ab3aee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 identity=59104 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.166 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-h2lfr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3704ab3aee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 identity=59104 ipv4=10.0.0.166 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-h2lfr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 7094f215-059f-4485-a2af-764932e3c8d2 default }" containerID=3a3c4e82805ab28ff5f065a4e0d87639db1bdda1eacff32f79b6bbaa4011f2e0 datapathConfiguration="&{false false false false false }" interface=lxc28297183b5a3 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-w5nkk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a3c4e8280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 ipv4=10.0.0.198 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-w5nkk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a3c4e8280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=8864c5f5-223c-4236-9109-807bd9be6fbb,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=8864c5f5-223c-4236-9109-807bd9be6fbb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.198 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-w5nkk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=8864c5f5-223c-4236-9109-807bd9be6fbb;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=8864c5f5-223c-4236-9109-807bd9be6fbb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a3c4e8280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identity=44516 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=8864c5f5-223c-4236-9109-807bd9be6fbb,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=8864c5f5-223c-4236-9109-807bd9be6fbb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.198 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-w5nkk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a3c4e8280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identity=44516 ipv4=10.0.0.198 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-w5nkk subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.067013024s file-path=/var/run/cilium/state/templates/0c668abe4f89a8aabe55b864e0409db2ba935067e4180eef6319aa9b9eecf49b/bpf_lxc.o subsys=datapath-loader level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3704ab3aee datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=700 identity=59104 ipv4=10.0.0.166 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-h2lfr subsys=endpoint level=info msg="Successful endpoint creation" containerID=3704ab3aee datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=700 identity=59104 ipv4=10.0.0.166 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-h2lfr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3a3c4e8280 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=293 identity=44516 ipv4=10.0.0.198 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-w5nkk subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a3c4e8280 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=293 identity=44516 ipv4=10.0.0.198 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-w5nkk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=615 identity=4 ipv4=10.0.0.217 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3a3c4e8280 endpointID=293 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-w5nkk subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=8864c5f5-223c-4236-9109-807bd9be6fbb k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=8864c5f5-223c-4236-9109-807bd9be6fbb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=3a3c4e8280 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=293 identity=44516 ipv4=10.0.0.198 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-w5nkk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 0e01608c-f31d-4fe2-8bf9-26b5cd0f7321 default }" containerID=f2f7849fab1075e637c35e6e6ba05e84c86c274a9c87d24db33830a48dd99127 datapathConfiguration="&{false false false false false }" interface=lxc6fbc326a6825 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wmksl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2f7849fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2258 ipv4=10.0.0.3 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wmksl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2f7849fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2258 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.3 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wmksl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f2f7849fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2258 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.3 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wmksl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2f7849fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2258 identity=3191 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.3 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wmksl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2f7849fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2258 identity=3191 ipv4=10.0.0.3 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wmksl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2f7849fab datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2258 identity=3191 ipv4=10.0.0.3 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wmksl subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2f7849fab datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2258 identity=3191 ipv4=10.0.0.3 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wmksl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3265 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03265 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03265 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03265 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03265:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3265 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 9c571346-6ac0-4c99-8886-1450bbd666a6 default }" containerID=089b98fd1e670ae7f3555119cac34f600ac86d39bbf92494e8c68af0a2c948c1 datapathConfiguration="&{false false false false false }" interface=lxcc33183675ea7 k8sPodName=kube-system/coredns-67659f764b-qxgfx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=089b98fd1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 ipv4=10.0.0.215 ipv6= k8sPodName=kube-system/coredns-67659f764b-qxgfx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=089b98fd1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.215 ipv6= k8sPodName=kube-system/coredns-67659f764b-qxgfx subsys=endpoint level=info msg="Identity of endpoint changed" containerID=089b98fd1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 identity=59104 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.215 ipv6= k8sPodName=kube-system/coredns-67659f764b-qxgfx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=089b98fd1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 identity=59104 ipv4=10.0.0.215 ipv6= k8sPodName=kube-system/coredns-67659f764b-qxgfx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 c1d4a3d8-d0ae-40ad-90fb-91d4543b7086 default }" containerID=6ebbd1f4bc8e4872284a84361df76c42fdb7c074921ce35b721c0e88194d7376 datapathConfiguration="&{false false false false false }" interface=lxcdcb800c8874d k8sPodName=kube-system/coredns-67659f764b-2wmrt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ebbd1f4bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 ipv4=10.0.0.198 ipv6= k8sPodName=kube-system/coredns-67659f764b-2wmrt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ebbd1f4bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.198 ipv6= k8sPodName=kube-system/coredns-67659f764b-2wmrt subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6ebbd1f4bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 identity=59104 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.198 ipv6= k8sPodName=kube-system/coredns-67659f764b-2wmrt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ebbd1f4bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=340 identity=59104 ipv4=10.0.0.198 ipv6= k8sPodName=kube-system/coredns-67659f764b-2wmrt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=089b98fd1e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2588 identity=59104 ipv4=10.0.0.215 ipv6= k8sPodName=kube-system/coredns-67659f764b-qxgfx subsys=endpoint level=info msg="Successful endpoint creation" containerID=089b98fd1e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2588 identity=59104 ipv4=10.0.0.215 ipv6= k8sPodName=kube-system/coredns-67659f764b-qxgfx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6ebbd1f4bc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=340 identity=59104 ipv4=10.0.0.198 ipv6= k8sPodName=kube-system/coredns-67659f764b-2wmrt subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ebbd1f4bc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=340 identity=59104 ipv4=10.0.0.198 ipv6= k8sPodName=kube-system/coredns-67659f764b-2wmrt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.250 83cdbc5a-c6a7-4530-af88-42963035f1a7 default }" containerID=45172ea4692eaffb57c17411be294cdcfd368a4a6119232d4d51b080f4a060ef datapathConfiguration="&{false false false false false }" interface=lxcfa85aab840bc k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dpj5k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45172ea469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dpj5k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45172ea469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dpj5k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=45172ea469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dpj5k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45172ea469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=18652 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dpj5k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45172ea469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=18652 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dpj5k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45172ea469 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=639 identity=18652 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dpj5k subsys=endpoint level=info msg="Successful endpoint creation" containerID=45172ea469 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=639 identity=18652 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dpj5k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3704ab3aee endpointID=700 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-h2lfr subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=3704ab3aee datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=700 identity=59104 ipv4=10.0.0.166 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-h2lfr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 540e46d0-5d93-43df-b7ed-7c750c312020 default }" containerID=dc0d83870225392b480bf017b0f8260ae3d239f11fe5ec1ddf72361886ee4188 datapathConfiguration="&{false false false false false }" interface=lxcd56c85b5b376 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9h99g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc0d838702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9h99g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc0d838702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9h99g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.157 4b3d2550-af0f-414e-8510-3fb68aac499e default }" containerID=4d7e217d478609fbd8b8cee2254e41061754a360d2298a60e54171e924a0970d datapathConfiguration="&{false false false false false }" interface=lxc711f6a297a46 k8sPodName=cert-manager/cert-manager-75c4c745bc-gncmv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d7e217d47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3112 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gncmv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 3736bb58-27e0-4c2c-9a6d-ea9c9575275b default }" containerID=fc6e617964a97b0ce48eb55c637729ebf7db2df2bfc73425059f67dafc9d7860 datapathConfiguration="&{false false false false false }" interface=lxcaaf8f6ec687a k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vvkhw labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=4d7e217d47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3112 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gncmv subsys=endpoint level=info msg="New endpoint" containerID=fc6e617964 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=869 ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vvkhw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc6e617964 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=869 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vvkhw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dc0d838702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9h99g line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=4d7e217d47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3112 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gncmv line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=fc6e617964 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=869 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vvkhw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc0d838702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identity=13057 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9h99g oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=dc0d838702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identity=13057 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9h99g subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d7e217d47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3112 identity=13696 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gncmv oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=4d7e217d47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3112 identity=13696 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gncmv subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc6e617964 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=869 identity=54595 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vvkhw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc6e617964 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=869 identity=54595 ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vvkhw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc0d838702 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=565 identity=13057 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9h99g subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc0d838702 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=565 identity=13057 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9h99g subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fc6e617964 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=869 identity=54595 ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vvkhw subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc6e617964 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=869 identity=54595 ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vvkhw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4d7e217d47 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3112 identity=13696 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gncmv subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d7e217d47 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3112 identity=13696 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gncmv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.80 c964b4e5-cb96-488f-bd34-039fcfd2e643 default }" containerID=25600af57b770465694754cd5bc9ee448493ba08340ab0e5d358d8bb524ce29c datapathConfiguration="&{false false false false false }" interface=lxc1a8ebd191169 k8sPodName=cert-manager/cert-manager-startupapicheck-stf9j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25600af57b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-stf9j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25600af57b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=bc73d927-0086-4264-9197-259195b962a7,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=bc73d927-0086-4264-9197-259195b962a7,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-stf9j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=bc73d927-0086-4264-9197-259195b962a7;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=bc73d927-0086-4264-9197-259195b962a7;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25600af57b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 identity=53495 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=bc73d927-0086-4264-9197-259195b962a7,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=bc73d927-0086-4264-9197-259195b962a7,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-stf9j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25600af57b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 identity=53495 ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-stf9j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=25600af57b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2000 identity=53495 ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-stf9j subsys=endpoint level=info msg="Successful endpoint creation" containerID=25600af57b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2000 identity=53495 ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-stf9j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=25600af57b endpointID=2000 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-stf9j subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=bc73d927-0086-4264-9197-259195b962a7 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=bc73d927-0086-4264-9197-259195b962a7 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=25600af57b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2000 identity=53495 ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-stf9j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 ea46e6e1-98e9-4bd5-a71d-dd8544c5f082 default }" containerID=bc65e9399c3b6083f9505cc3218a3592dc28c890b35803f6d6e4b987a0f3a03d datapathConfiguration="&{false false false false false }" interface=lxc3f079a278cb4 k8sPodName=ingress-nginx/ingress-nginx-admission-create-c8mfb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc65e9399c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=568 ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c8mfb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc65e9399c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=568 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=98774fc2-5138-4513-a892-9aa422a9686a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=98774fc2-5138-4513-a892-9aa422a9686a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c8mfb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=98774fc2-5138-4513-a892-9aa422a9686a;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=98774fc2-5138-4513-a892-9aa422a9686a;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc65e9399c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=568 identity=4675 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=98774fc2-5138-4513-a892-9aa422a9686a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=98774fc2-5138-4513-a892-9aa422a9686a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c8mfb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bc65e9399c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=568 identity=4675 ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c8mfb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc65e9399c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=568 identity=4675 ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c8mfb subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc65e9399c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=568 identity=4675 ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c8mfb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bc65e9399c endpointID=568 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-c8mfb subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=98774fc2-5138-4513-a892-9aa422a9686a k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=98774fc2-5138-4513-a892-9aa422a9686a k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=bc65e9399c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=568 identity=4675 ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c8mfb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 7dc4d799-36fe-4e8b-a185-bfdf31f1ce54 default }" containerID=39fdf2722710fb2a02ac420fc73e4e4ee9ff39221ef77f82f7496658a079dd80 datapathConfiguration="&{false false false false false }" interface=lxc86b559492a4d k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bhb2j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39fdf27227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bhb2j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39fdf27227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bhb2j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=39fdf27227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bhb2j line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39fdf27227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=5884 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bhb2j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39fdf27227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=5884 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bhb2j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39fdf27227 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=168 identity=5884 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bhb2j subsys=endpoint level=info msg="Successful endpoint creation" containerID=39fdf27227 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=168 identity=5884 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bhb2j subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.218 c01e5f50-6f71-473b-976c-9f6cd24a01e7 default }" containerID=f6df3ca2cde85728e12d90c38bb70546e05a05676ca59f54a79a0d8644d17f81 datapathConfiguration="&{false false false false false }" interface=lxc69ecf6054a4e k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wblcx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6df3ca2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=725 ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wblcx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6df3ca2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=725 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b401f121-1079-40e4-a81c-e2236169610c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=b401f121-1079-40e4-a81c-e2236169610c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wblcx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=b401f121-1079-40e4-a81c-e2236169610c;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=b401f121-1079-40e4-a81c-e2236169610c;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6df3ca2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=725 identity=21661 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b401f121-1079-40e4-a81c-e2236169610c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=b401f121-1079-40e4-a81c-e2236169610c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wblcx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6df3ca2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=725 identity=21661 ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wblcx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f6df3ca2cd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=725 identity=21661 ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wblcx subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6df3ca2cd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=725 identity=21661 ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wblcx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f6df3ca2cd endpointID=725 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-wblcx subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=b401f121-1079-40e4-a81c-e2236169610c k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=b401f121-1079-40e4-a81c-e2236169610c k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=f6df3ca2cd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=725 identity=21661 ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wblcx subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=8ed5d850-f7d1-42d0-a1ac-59a20a267cc4] Description:}]" policyAddRequest=928e16cc-c111-4fcf-ab22-2b4bf812ceac subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=928e16cc-c111-4fcf-ab22-2b4bf812ceac policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=db02a0aa-edc4-4e9c-a2aa-682f32b7e89c] Description:}]" policyAddRequest=4a63c99d-41b0-430e-90a2-19a236139e17 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=4a63c99d-41b0-430e-90a2-19a236139e17 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.154 1c59aa2f-beab-4caf-a2c9-54978fcdf8b7 default }" containerID=f210ac11edae736962794f8bd2c1110d2ac60d7d52c4a31080971120fffac376 datapathConfiguration="&{false false false false false }" interface=lxc12a80f2a13c2 k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-dcdgw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f210ac11ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1221 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-dcdgw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f210ac11ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1221 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-dcdgw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f210ac11ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1221 identity=64450 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-dcdgw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f210ac11ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1221 identity=64450 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-dcdgw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f210ac11ed datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1221 identity=64450 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-dcdgw subsys=endpoint level=info msg="Successful endpoint creation" containerID=f210ac11ed datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1221 identity=64450 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-dcdgw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.225 a97d18ed-c307-46be-b6f7-9dc4c5fee89a default }" containerID=09f392ad104e52b1183e6522b2715b8736ac068674e3a92ef51b3961637a9ab5 datapathConfiguration="&{false false false false false }" interface=lxccd90166f79b0 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-hkqbd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09f392ad10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-hkqbd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09f392ad10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-hkqbd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09f392ad10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identity=6949 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-hkqbd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09f392ad10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identity=6949 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-hkqbd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=09f392ad10 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1549 identity=6949 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-hkqbd subsys=endpoint level=info msg="Successful endpoint creation" containerID=09f392ad10 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1549 identity=6949 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-hkqbd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.23 de22ea28-c55f-4daf-bf5f-1502fcb4ffc1 default }" containerID=dc54775afff50fc82a0409b104817679177049d30a56126a4940a43e8c476dcf datapathConfiguration="&{false false false false false }" interface=lxc9ba26b2fe728 k8sPodName=openstack/pxc-operator-7cff949c8b-q9zkb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc54775aff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-q9zkb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc54775aff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-q9zkb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc54775aff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identity=24111 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-q9zkb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=dc54775aff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=181 identity=24111 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-q9zkb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc54775aff datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=181 identity=24111 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-q9zkb subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc54775aff datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=181 identity=24111 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-q9zkb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.90 f552eee9-b64b-4edf-83c5-1b8709579220 default }" containerID=5c3010c9d51bda7b8fc706a5d8bbc25bd5730e77fbf1ec4c1a543415aa33a866 datapathConfiguration="&{false false false false false }" interface=lxc069163cd6b4a k8sPodName=local-path-storage/helper-pod-create-pvc-88b3aa28-d50d-4f68-a131-1204b24e263a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c3010c9d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88b3aa28-d50d-4f68-a131-1204b24e263a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c3010c9d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88b3aa28-d50d-4f68-a131-1204b24e263a subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c3010c9d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 identity=52605 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88b3aa28-d50d-4f68-a131-1204b24e263a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c3010c9d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 identity=52605 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88b3aa28-d50d-4f68-a131-1204b24e263a subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5c3010c9d5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=962 identity=52605 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88b3aa28-d50d-4f68-a131-1204b24e263a subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c3010c9d5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=962 identity=52605 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88b3aa28-d50d-4f68-a131-1204b24e263a subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.199 959be586-ea22-416a-bc60-51a3ec710ec2 default }" containerID=274e870a2794e1dc98cfabeaec334e7ff05650950e828bec0980d6e7a914975a datapathConfiguration="&{false false false false false }" interface=lxc91b9bb31d07e k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=274e870a27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=274e870a27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=274e870a27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 identity=12561 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=274e870a27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 identity=12561 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=274e870a27 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=445 identity=12561 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=274e870a27 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=445 identity=12561 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5c3010c9d5 endpointID=962 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-88b3aa28-d50d-4f68-a131-1204b24e263a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5c3010c9d5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=962 identity=52605 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88b3aa28-d50d-4f68-a131-1204b24e263a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 aaf9ac5b-57c6-4edb-be02-60efc4d65264 default }" containerID=e3a2d7d09a3c8d7be2c9de8e690aa829e81f78e9df1fc7839f7c6f7205b42ccf datapathConfiguration="&{false false false false false }" interface=lxc8c258685e897 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3a2d7d09a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=184 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3a2d7d09a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=184 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3a2d7d09a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=184 identity=50475 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3a2d7d09a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=184 identity=50475 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e3a2d7d09a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=184 identity=50475 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3a2d7d09a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=184 identity=50475 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=99d7f814-a4c4-4a40-8f36-189bc333948b] Description:}]" policyAddRequest=f7e8033d-4aa2-401f-8a57-9abf83c7611e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f7e8033d-4aa2-401f-8a57-9abf83c7611e policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.216 e3856ec3-43fb-4994-836c-93006cc49b2b default }" containerID=cf08644565ac39d1cc8e9a7abea4b8a39d5b36148a22bb16ca15aeee835f3277 datapathConfiguration="&{false false false false false }" interface=lxcc37ad60ee914 k8sPodName=local-path-storage/helper-pod-create-pvc-2aa5c969-6bd3-4ddc-8c68-5ff33f3d5f6d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf08644565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=199 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2aa5c969-6bd3-4ddc-8c68-5ff33f3d5f6d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf08644565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=199 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2aa5c969-6bd3-4ddc-8c68-5ff33f3d5f6d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf08644565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=199 identity=52605 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2aa5c969-6bd3-4ddc-8c68-5ff33f3d5f6d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf08644565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=199 identity=52605 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2aa5c969-6bd3-4ddc-8c68-5ff33f3d5f6d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf08644565 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=199 identity=52605 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2aa5c969-6bd3-4ddc-8c68-5ff33f3d5f6d subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf08644565 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=199 identity=52605 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2aa5c969-6bd3-4ddc-8c68-5ff33f3d5f6d subsys=daemon level=info msg="Delete endpoint request" containerID=cf08644565 endpointID=199 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2aa5c969-6bd3-4ddc-8c68-5ff33f3d5f6d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cf08644565 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=199 identity=52605 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2aa5c969-6bd3-4ddc-8c68-5ff33f3d5f6d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 f72aa07c-b5b8-4ac9-bd50-adb61ddd2bed default }" containerID=40a57b99cd1c6f657ab42dd2a2f5d9c0482804c6e090c871dfb3cc51559b3657 datapathConfiguration="&{false false false false false }" interface=lxc7c0a0a745f11 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40a57b99cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40a57b99cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40a57b99cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identity=34759 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=40a57b99cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identity=34759 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40a57b99cd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=97 identity=34759 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=40a57b99cd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=97 identity=34759 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=3d0528b5-b403-4ba7-9f4f-3441ae53edff] Description:}]" policyAddRequest=83f518be-0b36-44fc-aacc-6aab6bde6d22 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=83f518be-0b36-44fc-aacc-6aab6bde6d22 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.104 06e95892-ed2f-4ba3-b01d-648cd9417cb2 default }" containerID=1649aad22f63b6423d17d7956abd8d727e8470f36ddcfbf6c5778a3e974456a2 datapathConfiguration="&{false false false false false }" interface=lxccd94ee8b837f k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1649aad22f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1255 ipv4=10.0.0.104 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1649aad22f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1255 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.104 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1649aad22f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1255 identity=39623 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.104 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1649aad22f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1255 identity=39623 ipv4=10.0.0.104 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1649aad22f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1255 identity=39623 ipv4=10.0.0.104 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1649aad22f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1255 identity=39623 ipv4=10.0.0.104 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009617595736334493 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.223 aab407a9-0daa-46b0-bedf-78595a7be457 default }" containerID=4405b2775f8087839f04f05ee74b879a5a5f3505f880e85d64dc126b6a13806d datapathConfiguration="&{false false false false false }" interface=lxcd8dbe6409020 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-2qqt6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4405b2775f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2236 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-2qqt6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4405b2775f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2236 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-2qqt6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4405b2775f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2236 identity=16679 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-2qqt6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4405b2775f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2236 identity=16679 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-2qqt6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4405b2775f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2236 identity=16679 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-2qqt6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4405b2775f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2236 identity=16679 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-2qqt6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.99 20ea73c2-4657-4319-8ab5-f2cd4aa04ef4 default }" containerID=aa6444e429bd40ad8150131f1878f0e053e939e79400a39ac605cc21f5512b6e datapathConfiguration="&{false false false false false }" interface=lxc9cd25796b30b k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-t4tlc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa6444e429 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-t4tlc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa6444e429 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-t4tlc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.115 62bd0282-db00-4906-aa1a-c7f00d82bc37 default }" containerID=41cd5175a5a686649318d5ec5698e57d310acb36619644dad71a1f79ed4124f9 datapathConfiguration="&{false false false false false }" interface=lxc597df630295b k8sPodName=monitoring/node-feature-discovery-worker-5rwpl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41cd5175a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5rwpl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41cd5175a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5rwpl subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa6444e429 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 identity=37886 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-t4tlc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa6444e429 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 identity=37886 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-t4tlc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41cd5175a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identity=8224 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5rwpl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41cd5175a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identity=8224 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5rwpl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa6444e429 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=241 identity=37886 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-t4tlc subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa6444e429 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=241 identity=37886 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-t4tlc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=41cd5175a5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1072 identity=8224 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5rwpl subsys=endpoint level=info msg="Successful endpoint creation" containerID=41cd5175a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1072 identity=8224 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5rwpl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.128 44e8ffb8-4fd0-40dc-aec7-333b85151368 default }" containerID=317458ca5e449fb495d2d36253f88e0a846924b50a1717be720e44d39b68de23 datapathConfiguration="&{false false false false false }" interface=lxc9340518cccb4 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5n6v9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=317458ca5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 ipv4=10.0.0.128 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5n6v9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=317458ca5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.128 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5n6v9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=317458ca5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 identity=11166 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.128 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5n6v9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=317458ca5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 identity=11166 ipv4=10.0.0.128 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5n6v9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=317458ca5e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=908 identity=11166 ipv4=10.0.0.128 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5n6v9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=317458ca5e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=908 identity=11166 ipv4=10.0.0.128 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5n6v9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3265 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03265 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03265 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03265 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03265:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3265 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 66bf523e-30b5-4457-aa19-4ff699b1fff8 default }" containerID=2bc5414a4c663ca2c59af01a9b6be2d67345dc02b42438cb05b4a39878ba91cd datapathConfiguration="&{false false false false false }" interface=lxc24c91c3fe724 k8sPodName=monitoring/kube-prometheus-stack-admission-create-5c7rz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2bc5414a4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5c7rz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2bc5414a4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d3a98166-dc87-41c4-ab7f-4cb0aff4ef57,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d3a98166-dc87-41c4-ab7f-4cb0aff4ef57,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5c7rz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=d3a98166-dc87-41c4-ab7f-4cb0aff4ef57;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=d3a98166-dc87-41c4-ab7f-4cb0aff4ef57;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2bc5414a4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identity=32687 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d3a98166-dc87-41c4-ab7f-4cb0aff4ef57,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d3a98166-dc87-41c4-ab7f-4cb0aff4ef57,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5c7rz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2bc5414a4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identity=32687 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5c7rz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2bc5414a4c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=784 identity=32687 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5c7rz subsys=endpoint level=info msg="Successful endpoint creation" containerID=2bc5414a4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=784 identity=32687 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5c7rz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2bc5414a4c endpointID=784 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-5c7rz subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=d3a98166-dc87-41c4-ab7f-4cb0aff4ef57 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=d3a98166-dc87-41c4-ab7f-4cb0aff4ef57 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=2bc5414a4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=784 identity=32687 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5c7rz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 d85774e6-fc7f-4722-a6d6-d4f73a1a391b default }" containerID=2ad38eee532ff028dc085c4c635e84676012855ca90850415b4b6b8b12b32f02 datapathConfiguration="&{false false false false false }" interface=lxccd9e4277dc43 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-55c9r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ad38eee53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1995 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-55c9r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ad38eee53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1995 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-55c9r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2ad38eee53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1995 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-55c9r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ad38eee53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1995 identity=49113 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-55c9r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ad38eee53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1995 identity=49113 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-55c9r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 3acba3c7-b779-49ef-b531-7214b9536156 default }" containerID=955da3f0b9fb13a701dc01b79237c32fffa8f970e0310417795921a18a458502 datapathConfiguration="&{false false false false false }" interface=lxc082b034bb983 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cbmpq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=955da3f0b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cbmpq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=955da3f0b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cbmpq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.251 56b1ccca-4151-480c-8ff3-b52e4a350f39 default }" containerID=9f12c91457377aea1dee0eccf84c248fc5b9a0752de764743dbd8136d698cab0 datapathConfiguration="&{false false false false false }" interface=lxc0ba2be4df78e k8sPodName=monitoring/kube-prometheus-stack-grafana-674c8646c9-rhzch labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f12c91457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3644 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-674c8646c9-rhzch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f12c91457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3644 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-674c8646c9-rhzch subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=955da3f0b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=47949 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cbmpq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=955da3f0b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=47949 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cbmpq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f12c91457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3644 identity=16887 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-674c8646c9-rhzch oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f12c91457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3644 identity=16887 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-674c8646c9-rhzch subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ad38eee53 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1995 identity=49113 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-55c9r subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ad38eee53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1995 identity=49113 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-55c9r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=955da3f0b9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=336 identity=47949 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cbmpq subsys=endpoint level=info msg="Successful endpoint creation" containerID=955da3f0b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=336 identity=47949 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cbmpq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9f12c91457 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3644 identity=16887 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-674c8646c9-rhzch subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f12c91457 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3644 identity=16887 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-674c8646c9-rhzch subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.85 db44de79-a5b2-4ec0-aadc-d3def28a760b default }" containerID=f57f03deab2092772e484bd7eab12530c35f1017941e573f305cbd6528c61d15 datapathConfiguration="&{false false false false false }" interface=lxc1cf644740589 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-25p6z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f57f03deab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2281 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-25p6z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f57f03deab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2281 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=ff2e9954-9f0d-4fb3-ac6a-8fefe72b6779,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ff2e9954-9f0d-4fb3-ac6a-8fefe72b6779,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-25p6z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=ff2e9954-9f0d-4fb3-ac6a-8fefe72b6779;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=ff2e9954-9f0d-4fb3-ac6a-8fefe72b6779;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f57f03deab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2281 identity=593 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=ff2e9954-9f0d-4fb3-ac6a-8fefe72b6779,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ff2e9954-9f0d-4fb3-ac6a-8fefe72b6779,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-25p6z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f57f03deab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2281 identity=593 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-25p6z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f57f03deab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2281 identity=593 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-25p6z subsys=endpoint level=info msg="Successful endpoint creation" containerID=f57f03deab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2281 identity=593 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-25p6z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f57f03deab endpointID=2281 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-25p6z subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=ff2e9954-9f0d-4fb3-ac6a-8fefe72b6779 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=ff2e9954-9f0d-4fb3-ac6a-8fefe72b6779 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f57f03deab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2281 identity=593 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-25p6z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 46023242-6e2e-4a57-b02e-bf086429ff03 default }" containerID=69b1d36eb79736c735d645ad58ec5ca44228b51a9553d2f3e6e2209f005a3d0a datapathConfiguration="&{false false false false false }" interface=lxcde2f17b11212 k8sPodName=local-path-storage/helper-pod-create-pvc-42ac0d5d-4834-4851-a0b7-0d206aa2a774 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69b1d36eb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ac0d5d-4834-4851-a0b7-0d206aa2a774 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69b1d36eb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ac0d5d-4834-4851-a0b7-0d206aa2a774 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69b1d36eb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identity=52605 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ac0d5d-4834-4851-a0b7-0d206aa2a774 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69b1d36eb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identity=52605 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ac0d5d-4834-4851-a0b7-0d206aa2a774 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=69b1d36eb7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=484 identity=52605 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ac0d5d-4834-4851-a0b7-0d206aa2a774 subsys=endpoint level=info msg="Successful endpoint creation" containerID=69b1d36eb7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=484 identity=52605 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ac0d5d-4834-4851-a0b7-0d206aa2a774 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.141 1b270549-46f3-4dd1-bdeb-c88660cbb117 default }" containerID=a646a5735407531179a2384635b6db71b85de28a9e7c2f71bc4d6e54241366af datapathConfiguration="&{false false false false false }" interface=lxcc479a7e8370a k8sPodName=local-path-storage/helper-pod-create-pvc-d6995a50-5656-437e-938a-bcd4eb958d96 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a646a57354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1981 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6995a50-5656-437e-938a-bcd4eb958d96 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a646a57354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1981 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6995a50-5656-437e-938a-bcd4eb958d96 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a646a57354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1981 identity=52605 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6995a50-5656-437e-938a-bcd4eb958d96 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a646a57354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1981 identity=52605 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6995a50-5656-437e-938a-bcd4eb958d96 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a646a57354 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1981 identity=52605 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6995a50-5656-437e-938a-bcd4eb958d96 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a646a57354 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1981 identity=52605 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6995a50-5656-437e-938a-bcd4eb958d96 subsys=daemon level=info msg="Delete endpoint request" containerID=a646a57354 endpointID=1981 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d6995a50-5656-437e-938a-bcd4eb958d96 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=69b1d36eb7 endpointID=484 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-42ac0d5d-4834-4851-a0b7-0d206aa2a774 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a646a57354 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1981 identity=52605 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6995a50-5656-437e-938a-bcd4eb958d96 subsys=endpoint level=info msg="Removed endpoint" containerID=69b1d36eb7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=484 identity=52605 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ac0d5d-4834-4851-a0b7-0d206aa2a774 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 279522ba-c434-484f-b7db-5ceaf836559a default }" containerID=b2c4005e1350993f047bcb6de7bf497c34e49558e55b6abc9bfdd6c61d8bc305 datapathConfiguration="&{false false false false false }" interface=lxc4aa76f789864 k8sPodName=monitoring/loki-gateway-cf54cb88c-vhf48 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2c4005e13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vhf48 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2c4005e13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vhf48 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b2c4005e13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vhf48 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b2c4005e13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identity=28857 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vhf48 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2c4005e13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identity=28857 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vhf48 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 dd71a7c8-848c-43da-95a3-f9d32261041b default }" containerID=da26d828a994d204791c6084c1bcc3e40649f299ffd3a2139c730647196adc06 datapathConfiguration="&{false false false false false }" interface=lxc7799db0e52a2 k8sPodName=local-path-storage/helper-pod-create-pvc-96836f4c-995f-4ded-a3be-8375320a3a51 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da26d828a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1968 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96836f4c-995f-4ded-a3be-8375320a3a51 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da26d828a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1968 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96836f4c-995f-4ded-a3be-8375320a3a51 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da26d828a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1968 identity=52605 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96836f4c-995f-4ded-a3be-8375320a3a51 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da26d828a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1968 identity=52605 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96836f4c-995f-4ded-a3be-8375320a3a51 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2c4005e13 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=506 identity=28857 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vhf48 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2c4005e13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=506 identity=28857 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vhf48 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=da26d828a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1968 identity=52605 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96836f4c-995f-4ded-a3be-8375320a3a51 subsys=endpoint level=info msg="Successful endpoint creation" containerID=da26d828a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1968 identity=52605 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96836f4c-995f-4ded-a3be-8375320a3a51 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.65 b27ad2cd-ae50-4379-97f0-04755536ec52 default }" containerID=227d5f525fc8de5e3d403f4c137105332515369a2a2776ea311f0681093daf25 datapathConfiguration="&{false false false false false }" interface=lxca67da66da87b k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=227d5f525f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1388 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 1afb3665-75cc-4aa9-868b-c89aed380953 default }" containerID=0f1b20867ec56d58496c23895136dda90a832c42b47b6b290b480b9f0b13a0a5 datapathConfiguration="&{false false false false false }" interface=lxca430f60f7577 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=227d5f525f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1388 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="New endpoint" containerID=0f1b20867e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=0f1b20867e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=227d5f525f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1388 identity=21390 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=227d5f525f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1388 identity=21390 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f1b20867e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=12610 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f1b20867e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=12610 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=227d5f525f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1388 identity=21390 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=227d5f525f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1388 identity=21390 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0f1b20867e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=31 identity=12610 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f1b20867e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=31 identity=12610 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.117 b5077993-eea6-4a3a-8d2b-9bcb2b8c7c89 default }" containerID=8c0aa87974769ea5a0df7b8b77e9c6be9c191e6c3dd080ee240932a4add849a2 datapathConfiguration="&{false false false false false }" interface=lxc4cbe25b23d4f k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c0aa87974 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c0aa87974 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c0aa87974 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identity=53543 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c0aa87974 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identity=53543 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c0aa87974 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=689 identity=53543 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c0aa87974 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=689 identity=53543 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.156 4c3cad57-3655-4739-aa82-634ea000457c default }" containerID=1ad7db3ee20d2ac7639caa104681e91a02831e241fb742a2ef6853fa223d57e2 datapathConfiguration="&{false false false false false }" interface=lxc887b51afe168 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ad7db3ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1981 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ad7db3ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1981 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ad7db3ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1981 identity=3443 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ad7db3ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1981 identity=3443 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.151 b5db2491-0c18-4a3a-af1e-d3129172da46 default }" containerID=8b1a796d3a0e92f16e46069e90e2b811d8a0f3fbbebcf5ec9abd6bf7ba32b54e datapathConfiguration="&{false false false false false }" interface=lxc7d6ecec747f2 k8sPodName=monitoring/vector-666bl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b1a796d3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1411 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/vector-666bl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b1a796d3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1411 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/vector-666bl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b1a796d3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1411 identity=51547 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/vector-666bl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b1a796d3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1411 identity=51547 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/vector-666bl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ad7db3ee2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1981 identity=3443 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ad7db3ee2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1981 identity=3443 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8b1a796d3a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1411 identity=51547 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/vector-666bl subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b1a796d3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1411 identity=51547 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/vector-666bl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=da26d828a9 endpointID=1968 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-96836f4c-995f-4ded-a3be-8375320a3a51 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=da26d828a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1968 identity=52605 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96836f4c-995f-4ded-a3be-8375320a3a51 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.158 2d056f52-1c6e-48ce-a2c8-f221caf3ac33 default }" containerID=7c6b42fdffae4d8d0b5cab6313b312b7a3db05a063cd0e2a82e29a2150729708 datapathConfiguration="&{false false false false false }" interface=lxcb66b1ed302bc k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c6b42fdff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c6b42fdff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c6b42fdff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identity=7240 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c6b42fdff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identity=7240 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c6b42fdff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=593 identity=7240 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c6b42fdff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=593 identity=7240 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.140 2cb76942-6fb0-4746-b3f8-f5adda2c4a6a default }" containerID=abcf3fa16fe12e7ab09ff7f8ff97f70affe79093d1e466a46467961d85234410 datapathConfiguration="&{false false false false false }" interface=lxc807acc781fe1 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-z4mnt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abcf3fa16f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2930 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-z4mnt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abcf3fa16f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2930 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-z4mnt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abcf3fa16f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2930 identity=7716 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-z4mnt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=abcf3fa16f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2930 identity=7716 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-z4mnt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=abcf3fa16f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2930 identity=7716 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-z4mnt subsys=endpoint level=info msg="Successful endpoint creation" containerID=abcf3fa16f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2930 identity=7716 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-z4mnt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.211 31c805fc-e5eb-4330-9d7f-69ce8d42ed16 default }" containerID=988aaf4879c479b477833374f709243b4c7ab63c29734e751270ea32c5116707 datapathConfiguration="&{false false false false false }" interface=lxc9078f79df792 k8sPodName=openstack/memcached-memcached-6479589586-pjjzw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=988aaf4879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pjjzw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=988aaf4879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pjjzw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=988aaf4879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.211 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pjjzw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=988aaf4879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 identity=50828 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pjjzw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=988aaf4879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 identity=50828 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pjjzw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=988aaf4879 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=369 identity=50828 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pjjzw subsys=endpoint level=info msg="Successful endpoint creation" containerID=988aaf4879 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=369 identity=50828 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pjjzw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.25 684d5532-3a99-4433-9bc5-6f888c97fa7e default }" containerID=7168cfbc471096e21f4dfedc33060d7e72d53432a6f2def2bcc1b209662a32fc datapathConfiguration="&{false false false false false }" interface=lxc11ef7750a36d k8sPodName=local-path-storage/helper-pod-create-pvc-3ef64ddf-f9fd-4bfd-95bb-a7e89cf08453 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7168cfbc47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2427 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ef64ddf-f9fd-4bfd-95bb-a7e89cf08453 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7168cfbc47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2427 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ef64ddf-f9fd-4bfd-95bb-a7e89cf08453 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7168cfbc47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2427 identity=52605 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ef64ddf-f9fd-4bfd-95bb-a7e89cf08453 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7168cfbc47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2427 identity=52605 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ef64ddf-f9fd-4bfd-95bb-a7e89cf08453 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7168cfbc47 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2427 identity=52605 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ef64ddf-f9fd-4bfd-95bb-a7e89cf08453 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7168cfbc47 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2427 identity=52605 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ef64ddf-f9fd-4bfd-95bb-a7e89cf08453 subsys=daemon level=info msg="Delete endpoint request" containerID=7168cfbc47 endpointID=2427 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3ef64ddf-f9fd-4bfd-95bb-a7e89cf08453 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7168cfbc47 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2427 identity=52605 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ef64ddf-f9fd-4bfd-95bb-a7e89cf08453 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 e058c46d-9926-4033-b750-eb725aeb9839 default }" containerID=b54df4841ed6f466e4715f958d559ca45acbd1159e473a84b3ac81ad8f15e842 datapathConfiguration="&{false false false false false }" interface=lxcd0786b2601f6 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b54df4841e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b54df4841e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b54df4841e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identity=14033 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b54df4841e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identity=14033 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b54df4841e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=27 identity=14033 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b54df4841e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=27 identity=14033 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.111 a53ba5f1-010f-469b-a7aa-27850254668c default }" containerID=fbc1ba7a93f9dbabe1cf4fb72407b95d5495493e47a1e594df5ec05d9d1d9b73 datapathConfiguration="&{false false false false false }" interface=lxcb9b9ef78b9f3 k8sPodName=openstack/keystone-api-597b46646d-trkrh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbc1ba7a93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-api-597b46646d-trkrh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbc1ba7a93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-api-597b46646d-trkrh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fbc1ba7a93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 identity=36258 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-api-597b46646d-trkrh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fbc1ba7a93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=765 identity=36258 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-api-597b46646d-trkrh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 94b0e1ee-d2a4-4d7d-b93f-1fa78d44cdd0 default }" containerID=ec794728744caa6157e285cade4c4b2dd6b9540d6e7827601f43da19f19af708 datapathConfiguration="&{false false false false false }" interface=lxcbdcf4647a00b k8sPodName=openstack/keystone-credential-setup-8qrxt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec79472874 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-credential-setup-8qrxt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec79472874 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8745658b-6951-49e6-ac61-27919344f31b,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=8745658b-6951-49e6-ac61-27919344f31b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-credential-setup-8qrxt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8745658b-6951-49e6-ac61-27919344f31b;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=8745658b-6951-49e6-ac61-27919344f31b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec79472874 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=6821 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8745658b-6951-49e6-ac61-27919344f31b,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=8745658b-6951-49e6-ac61-27919344f31b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-credential-setup-8qrxt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec79472874 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=6821 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-credential-setup-8qrxt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fbc1ba7a93 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=765 identity=36258 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-api-597b46646d-trkrh subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbc1ba7a93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=765 identity=36258 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-api-597b46646d-trkrh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ec79472874 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=292 identity=6821 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-credential-setup-8qrxt subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec79472874 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=292 identity=6821 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-credential-setup-8qrxt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ec79472874 endpointID=292 k8sNamespace=openstack k8sPodName=keystone-credential-setup-8qrxt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8745658b-6951-49e6-ac61-27919344f31b k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=8745658b-6951-49e6-ac61-27919344f31b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ec79472874 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=292 identity=6821 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-credential-setup-8qrxt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 d89e9288-5773-4916-962c-c0ba86a3f4ec default }" containerID=d7c8b0dfc9ff20119fdc5a092aede897e35c03af44c27fce7138f37b5ed931ad datapathConfiguration="&{false false false false false }" interface=lxc4084d5c1a14b k8sPodName=openstack/keystone-db-init-4jh92 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7c8b0dfc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2151 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-db-init-4jh92 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7c8b0dfc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2151 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4dc6cb39-43b8-4b31-95c1-3538b65d2444,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=4dc6cb39-43b8-4b31-95c1-3538b65d2444,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-db-init-4jh92 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4dc6cb39-43b8-4b31-95c1-3538b65d2444;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=4dc6cb39-43b8-4b31-95c1-3538b65d2444;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d7c8b0dfc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2151 identity=9248 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4dc6cb39-43b8-4b31-95c1-3538b65d2444,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=4dc6cb39-43b8-4b31-95c1-3538b65d2444,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-db-init-4jh92 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7c8b0dfc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2151 identity=9248 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-db-init-4jh92 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7c8b0dfc9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2151 identity=9248 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-db-init-4jh92 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7c8b0dfc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2151 identity=9248 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-db-init-4jh92 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d7c8b0dfc9 endpointID=2151 k8sNamespace=openstack k8sPodName=keystone-db-init-4jh92 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4dc6cb39-43b8-4b31-95c1-3538b65d2444 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=4dc6cb39-43b8-4b31-95c1-3538b65d2444 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d7c8b0dfc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2151 identity=9248 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-db-init-4jh92 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 110525f7-db93-451f-acb4-2c25f9235a7b default }" containerID=f6f23df7c14e9149ae279be8ab62d989aa2dca9b54305252db0091475d8f53dc datapathConfiguration="&{false false false false false }" interface=lxc7025a353ffb7 k8sPodName=openstack/keystone-fernet-setup-wkp82 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6f23df7c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-fernet-setup-wkp82 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6f23df7c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3872fdbe-126a-4423-ae36-7f009eec703b,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=3872fdbe-126a-4423-ae36-7f009eec703b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-fernet-setup-wkp82 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3872fdbe-126a-4423-ae36-7f009eec703b;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=3872fdbe-126a-4423-ae36-7f009eec703b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6f23df7c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identity=46396 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3872fdbe-126a-4423-ae36-7f009eec703b,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=3872fdbe-126a-4423-ae36-7f009eec703b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-fernet-setup-wkp82 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6f23df7c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identity=46396 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-fernet-setup-wkp82 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f6f23df7c1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=117 identity=46396 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-fernet-setup-wkp82 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6f23df7c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=117 identity=46396 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-fernet-setup-wkp82 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f6f23df7c1 endpointID=117 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-wkp82 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3872fdbe-126a-4423-ae36-7f009eec703b k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=3872fdbe-126a-4423-ae36-7f009eec703b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f6f23df7c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=117 identity=46396 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-fernet-setup-wkp82 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 b4c2536b-dd1f-45f0-bfef-f9896c010d1a default }" containerID=819b820ed096ce66222d96101ae74f0b3963708b3385ecbfc59d5cfdc1d8eb39 datapathConfiguration="&{false false false false false }" interface=lxcce31ac620941 k8sPodName=openstack/keystone-db-sync-qxkfv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=819b820ed0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-sync-qxkfv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=819b820ed0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=568a944d-f9f2-4e33-8106-9aea2d014c60,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=568a944d-f9f2-4e33-8106-9aea2d014c60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-sync-qxkfv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=568a944d-f9f2-4e33-8106-9aea2d014c60;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=568a944d-f9f2-4e33-8106-9aea2d014c60;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=819b820ed0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 identity=33034 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=568a944d-f9f2-4e33-8106-9aea2d014c60,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=568a944d-f9f2-4e33-8106-9aea2d014c60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-sync-qxkfv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=819b820ed0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 identity=33034 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-sync-qxkfv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=819b820ed0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1212 identity=33034 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-sync-qxkfv subsys=endpoint level=info msg="Successful endpoint creation" containerID=819b820ed0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1212 identity=33034 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-sync-qxkfv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=819b820ed0 endpointID=1212 k8sNamespace=openstack k8sPodName=keystone-db-sync-qxkfv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=568a944d-f9f2-4e33-8106-9aea2d014c60 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=568a944d-f9f2-4e33-8106-9aea2d014c60 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=819b820ed0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1212 identity=33034 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-sync-qxkfv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 77929f4b-f3c1-4a91-8d1f-9895811b77cf default }" containerID=dc630aca669d1a640befdcad530672f8347ed961e416a80802ef67dd03ff4f47 datapathConfiguration="&{false false false false false }" interface=lxc58b845fdc2c1 k8sPodName=openstack/keystone-rabbit-init-zkjw9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc630aca66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-rabbit-init-zkjw9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc630aca66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7eec95e1-feb2-415c-a1c1-92e92af1ea3f,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7eec95e1-feb2-415c-a1c1-92e92af1ea3f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-rabbit-init-zkjw9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7eec95e1-feb2-415c-a1c1-92e92af1ea3f;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=7eec95e1-feb2-415c-a1c1-92e92af1ea3f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc630aca66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=617 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7eec95e1-feb2-415c-a1c1-92e92af1ea3f,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7eec95e1-feb2-415c-a1c1-92e92af1ea3f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-rabbit-init-zkjw9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc630aca66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=617 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-rabbit-init-zkjw9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc630aca66 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=563 identity=617 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-rabbit-init-zkjw9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc630aca66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=563 identity=617 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-rabbit-init-zkjw9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dc630aca66 endpointID=563 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-zkjw9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7eec95e1-feb2-415c-a1c1-92e92af1ea3f k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=7eec95e1-feb2-415c-a1c1-92e92af1ea3f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=dc630aca66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=563 identity=617 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-rabbit-init-zkjw9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 b3c18079-9701-4a61-be58-24c387e43dfa default }" containerID=d5a6850d4e5e18f4b0c0e1357899d33976b742005f77d20ad64fb6019dacab43 datapathConfiguration="&{false false false false false }" interface=lxcf9af5ef129b7 k8sPodName=openstack/keystone-domain-manage-7tlpk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5a6850d4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3680 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-domain-manage-7tlpk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5a6850d4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3680 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=19ef9228-e65b-4f7a-bc23-228f23558fe3,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=19ef9228-e65b-4f7a-bc23-228f23558fe3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-domain-manage-7tlpk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=19ef9228-e65b-4f7a-bc23-228f23558fe3;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=19ef9228-e65b-4f7a-bc23-228f23558fe3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5a6850d4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3680 identity=3460 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=19ef9228-e65b-4f7a-bc23-228f23558fe3,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=19ef9228-e65b-4f7a-bc23-228f23558fe3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-domain-manage-7tlpk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5a6850d4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3680 identity=3460 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-domain-manage-7tlpk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d5a6850d4e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3680 identity=3460 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-domain-manage-7tlpk subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5a6850d4e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3680 identity=3460 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-domain-manage-7tlpk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d5a6850d4e endpointID=3680 k8sNamespace=openstack k8sPodName=keystone-domain-manage-7tlpk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=19ef9228-e65b-4f7a-bc23-228f23558fe3 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=19ef9228-e65b-4f7a-bc23-228f23558fe3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d5a6850d4e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3680 identity=3460 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-domain-manage-7tlpk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 da1f309b-7909-4860-895d-be462a71d05e default }" containerID=afe839ee6733b8ce61d95ea8e7da7a2e9ef38110b3fa64abde1486977062eba0 datapathConfiguration="&{false false false false false }" interface=lxc554e30e4c838 k8sPodName=openstack/keystone-bootstrap-47jhp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=afe839ee67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-bootstrap-47jhp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=afe839ee67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=db461df3-73d5-4967-b848-2ddcf3694d61,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=db461df3-73d5-4967-b848-2ddcf3694d61,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-bootstrap-47jhp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=db461df3-73d5-4967-b848-2ddcf3694d61;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=db461df3-73d5-4967-b848-2ddcf3694d61;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=afe839ee67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 identity=41875 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=db461df3-73d5-4967-b848-2ddcf3694d61,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=db461df3-73d5-4967-b848-2ddcf3694d61,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-bootstrap-47jhp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=afe839ee67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 identity=41875 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-bootstrap-47jhp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=afe839ee67 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3995 identity=41875 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-bootstrap-47jhp subsys=endpoint level=info msg="Successful endpoint creation" containerID=afe839ee67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3995 identity=41875 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-bootstrap-47jhp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=afe839ee67 endpointID=3995 k8sNamespace=openstack k8sPodName=keystone-bootstrap-47jhp subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=db461df3-73d5-4967-b848-2ddcf3694d61 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=db461df3-73d5-4967-b848-2ddcf3694d61 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=afe839ee67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3995 identity=41875 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-bootstrap-47jhp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 4bdcf0fd-085a-4c62-8b7e-ba08f1b99539 default }" containerID=609280ad034777d689e59ffac132c0d282f975bdab317124c9367282da169357 datapathConfiguration="&{false false false false false }" interface=lxc2ddf53a4f84f k8sPodName=local-path-storage/helper-pod-create-pvc-3ecfb122-397a-4fa0-85c0-40e63d88dd52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=609280ad03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3211 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ecfb122-397a-4fa0-85c0-40e63d88dd52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=609280ad03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3211 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ecfb122-397a-4fa0-85c0-40e63d88dd52 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=609280ad03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3211 identity=52605 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ecfb122-397a-4fa0-85c0-40e63d88dd52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=609280ad03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3211 identity=52605 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ecfb122-397a-4fa0-85c0-40e63d88dd52 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=609280ad03 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3211 identity=52605 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ecfb122-397a-4fa0-85c0-40e63d88dd52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=609280ad03 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3211 identity=52605 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ecfb122-397a-4fa0-85c0-40e63d88dd52 subsys=daemon level=info msg="Delete endpoint request" containerID=609280ad03 endpointID=3211 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3ecfb122-397a-4fa0-85c0-40e63d88dd52 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=609280ad03 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3211 identity=52605 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ecfb122-397a-4fa0-85c0-40e63d88dd52 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 8315dfe5-6ef1-419d-b5c2-127c6f2ca284 default }" containerID=853e238676d977e31ed0b3db81e9ab88c88802c3e0d536c6ba69a575549b5faf datapathConfiguration="&{false false false false false }" interface=lxc4dfc5cdff189 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=853e238676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2821 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=853e238676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2821 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=853e238676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2821 identity=4426 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=853e238676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2821 identity=4426 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=853e238676 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2821 identity=4426 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=853e238676 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2821 identity=4426 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03449010510368336 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.95 95ac366f-6e19-459c-a491-5f600475af1e default }" containerID=9eb3d0ca14f9bb8b86832e208470a70c16b07da740d39bb638e7a99c674bd3f3 datapathConfiguration="&{false false false false false }" interface=lxc904fd5e96b2f k8sPodName=openstack/barbican-api-67444bc56f-fvszd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9eb3d0ca14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-api-67444bc56f-fvszd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9eb3d0ca14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-api-67444bc56f-fvszd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9eb3d0ca14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-api-67444bc56f-fvszd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9eb3d0ca14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=17192 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-api-67444bc56f-fvszd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9eb3d0ca14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=17192 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-api-67444bc56f-fvszd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 d62dc541-9667-44e5-aff8-8ff9d3d3af5e default }" containerID=e219401b904d694e2aa3bff88c570f896320b294847aff9a531719be4ba39c5e datapathConfiguration="&{false false false false false }" interface=lxc6a8bcb1d9704 k8sPodName=openstack/barbican-db-init-khpkf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e219401b90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2341 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-db-init-khpkf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e219401b90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2341 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c667eb2a-0048-44c4-974c-bbb284dc5a97,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=c667eb2a-0048-44c4-974c-bbb284dc5a97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-db-init-khpkf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c667eb2a-0048-44c4-974c-bbb284dc5a97;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=c667eb2a-0048-44c4-974c-bbb284dc5a97;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e219401b90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2341 identity=21654 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c667eb2a-0048-44c4-974c-bbb284dc5a97,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=c667eb2a-0048-44c4-974c-bbb284dc5a97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-db-init-khpkf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e219401b90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2341 identity=21654 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-db-init-khpkf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9eb3d0ca14 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=563 identity=17192 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-api-67444bc56f-fvszd subsys=endpoint level=info msg="Successful endpoint creation" containerID=9eb3d0ca14 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=563 identity=17192 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-api-67444bc56f-fvszd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e219401b90 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2341 identity=21654 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-db-init-khpkf subsys=endpoint level=info msg="Successful endpoint creation" containerID=e219401b90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2341 identity=21654 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-db-init-khpkf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e219401b90 endpointID=2341 k8sNamespace=openstack k8sPodName=barbican-db-init-khpkf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c667eb2a-0048-44c4-974c-bbb284dc5a97 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=c667eb2a-0048-44c4-974c-bbb284dc5a97 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e219401b90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2341 identity=21654 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-db-init-khpkf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 786c3346-d51b-43bb-86b4-e1b9baa2db09 default }" containerID=d9ab6d819342305a69d84070bbca35041f3ae179f80b8f64c97503f9e67ef238 datapathConfiguration="&{false false false false false }" interface=lxcc54bfc8e8c8e k8sPodName=openstack/barbican-db-sync-lqmnb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9ab6d8193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2634 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-lqmnb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9ab6d8193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2634 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=40d45768-f3ae-4a1a-86bd-9be1c083ed2d,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=40d45768-f3ae-4a1a-86bd-9be1c083ed2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-lqmnb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d9ab6d8193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2634 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-lqmnb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=40d45768-f3ae-4a1a-86bd-9be1c083ed2d;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=40d45768-f3ae-4a1a-86bd-9be1c083ed2d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9ab6d8193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2634 identity=31421 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=40d45768-f3ae-4a1a-86bd-9be1c083ed2d,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=40d45768-f3ae-4a1a-86bd-9be1c083ed2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-lqmnb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9ab6d8193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2634 identity=31421 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-lqmnb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d9ab6d8193 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2634 identity=31421 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-lqmnb subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9ab6d8193 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2634 identity=31421 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-lqmnb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d9ab6d8193 endpointID=2634 k8sNamespace=openstack k8sPodName=barbican-db-sync-lqmnb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=40d45768-f3ae-4a1a-86bd-9be1c083ed2d k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=40d45768-f3ae-4a1a-86bd-9be1c083ed2d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d9ab6d8193 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2634 identity=31421 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-lqmnb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 4a156c0a-7209-41ea-a31f-9d5843d04b75 default }" containerID=55c93167fc03c871fc4d4fca424609e030a4a56058ffb390dab1c75539148f48 datapathConfiguration="&{false false false false false }" interface=lxcb1260e0237c2 k8sPodName=openstack/barbican-rabbit-init-wqlwm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55c93167fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2177 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-rabbit-init-wqlwm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55c93167fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2177 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=02350429-0f7d-4bdf-b9ec-5222a799d8ec,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=02350429-0f7d-4bdf-b9ec-5222a799d8ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-rabbit-init-wqlwm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=02350429-0f7d-4bdf-b9ec-5222a799d8ec;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=02350429-0f7d-4bdf-b9ec-5222a799d8ec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=55c93167fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2177 identity=5652 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=02350429-0f7d-4bdf-b9ec-5222a799d8ec,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=02350429-0f7d-4bdf-b9ec-5222a799d8ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-rabbit-init-wqlwm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55c93167fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2177 identity=5652 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-rabbit-init-wqlwm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55c93167fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2177 identity=5652 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-rabbit-init-wqlwm subsys=endpoint level=info msg="Successful endpoint creation" containerID=55c93167fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2177 identity=5652 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-rabbit-init-wqlwm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=55c93167fc endpointID=2177 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-wqlwm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=02350429-0f7d-4bdf-b9ec-5222a799d8ec k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=02350429-0f7d-4bdf-b9ec-5222a799d8ec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=55c93167fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2177 identity=5652 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-rabbit-init-wqlwm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 219c2828-7595-4bfe-9f2b-23d65245c7d5 default }" containerID=60edb6035c08c24be4f83d930bfa88700d80647f829634b9ac902345a8c10088 datapathConfiguration="&{false false false false false }" interface=lxc1dcb10553093 k8sPodName=openstack/barbican-ks-service-tt7gf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60edb6035c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-ks-service-tt7gf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60edb6035c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a88e1903-9a3e-4497-b817-26f3e5e53c9c,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=a88e1903-9a3e-4497-b817-26f3e5e53c9c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-ks-service-tt7gf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a88e1903-9a3e-4497-b817-26f3e5e53c9c;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=a88e1903-9a3e-4497-b817-26f3e5e53c9c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=60edb6035c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=619 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a88e1903-9a3e-4497-b817-26f3e5e53c9c,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=a88e1903-9a3e-4497-b817-26f3e5e53c9c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-ks-service-tt7gf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60edb6035c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=619 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-ks-service-tt7gf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60edb6035c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=449 identity=619 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-ks-service-tt7gf subsys=endpoint level=info msg="Successful endpoint creation" containerID=60edb6035c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=449 identity=619 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-ks-service-tt7gf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=60edb6035c endpointID=449 k8sNamespace=openstack k8sPodName=barbican-ks-service-tt7gf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a88e1903-9a3e-4497-b817-26f3e5e53c9c k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=a88e1903-9a3e-4497-b817-26f3e5e53c9c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=60edb6035c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=449 identity=619 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-ks-service-tt7gf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 698b3486-03c8-4e70-937d-ac0b7f8e9c6c default }" containerID=162f6ed64fe89654daeba54a2d428659b6a641e753116aa8d05dd47300ef3f6d datapathConfiguration="&{false false false false false }" interface=lxcbb2076fdc98b k8sPodName=openstack/barbican-ks-endpoints-l6lzd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=162f6ed64f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l6lzd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=162f6ed64f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3d1ab794-19e6-4555-a17a-cb3e0183e0ae,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3d1ab794-19e6-4555-a17a-cb3e0183e0ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l6lzd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3d1ab794-19e6-4555-a17a-cb3e0183e0ae;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3d1ab794-19e6-4555-a17a-cb3e0183e0ae;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=162f6ed64f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l6lzd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=162f6ed64f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identity=3103 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3d1ab794-19e6-4555-a17a-cb3e0183e0ae,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3d1ab794-19e6-4555-a17a-cb3e0183e0ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l6lzd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=162f6ed64f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identity=3103 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l6lzd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=162f6ed64f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1267 identity=3103 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l6lzd subsys=endpoint level=info msg="Successful endpoint creation" containerID=162f6ed64f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1267 identity=3103 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l6lzd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=162f6ed64f endpointID=1267 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-l6lzd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3d1ab794-19e6-4555-a17a-cb3e0183e0ae k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3d1ab794-19e6-4555-a17a-cb3e0183e0ae k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=162f6ed64f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1267 identity=3103 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l6lzd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 f067fd21-b659-4976-a00c-e7d35c14aef5 default }" containerID=df3982b7b28b0ff18797979778ba8089c10b9406f4b20e88ec1494ad24862663 datapathConfiguration="&{false false false false false }" interface=lxc031c8b0f6a0e k8sPodName=openstack/barbican-ks-user-tvrsg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df3982b7b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3056 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-user-tvrsg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df3982b7b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3056 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4ac6fe84-350f-45c7-8369-f5de1b0e13c5,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=4ac6fe84-350f-45c7-8369-f5de1b0e13c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-user-tvrsg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4ac6fe84-350f-45c7-8369-f5de1b0e13c5;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=4ac6fe84-350f-45c7-8369-f5de1b0e13c5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=df3982b7b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3056 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-user-tvrsg line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=df3982b7b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3056 identity=7290 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4ac6fe84-350f-45c7-8369-f5de1b0e13c5,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=4ac6fe84-350f-45c7-8369-f5de1b0e13c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-user-tvrsg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df3982b7b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3056 identity=7290 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-user-tvrsg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df3982b7b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3056 identity=7290 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-user-tvrsg subsys=endpoint level=info msg="Successful endpoint creation" containerID=df3982b7b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3056 identity=7290 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-user-tvrsg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df3982b7b2 endpointID=3056 k8sNamespace=openstack k8sPodName=barbican-ks-user-tvrsg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4ac6fe84-350f-45c7-8369-f5de1b0e13c5 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=4ac6fe84-350f-45c7-8369-f5de1b0e13c5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=df3982b7b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3056 identity=7290 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-user-tvrsg subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.1 20ded529-827c-434c-8507-32cdbfe51779 default }" containerID=de2bd831211a29df3264ae2d4ef843c30f983594a6690b19b29ee209dc589638 datapathConfiguration="&{false false false false false }" interface=lxc1d76b44aa32c k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-cqzls labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de2bd83121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=370 ipv4=10.0.0.1 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-cqzls subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de2bd83121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=370 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.1 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-cqzls subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de2bd83121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=370 identity=8782 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.1 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-cqzls oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de2bd83121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=370 identity=8782 ipv4=10.0.0.1 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-cqzls subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=de2bd83121 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=370 identity=8782 ipv4=10.0.0.1 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-cqzls subsys=endpoint level=info msg="Successful endpoint creation" containerID=de2bd83121 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=370 identity=8782 ipv4=10.0.0.1 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-cqzls subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.85 cff4f307-61a2-4eb1-9bd0-d2e7649184e1 default }" containerID=aaa8eb40bf95f2766b916260fc3203d379bb4629093fae8f0ab541064387bf40 datapathConfiguration="&{false false false false false }" interface=lxc4d22d1417d25 k8sPodName=openstack/rook-ceph-detect-version-px2cj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aaa8eb40bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rook-ceph-detect-version-px2cj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aaa8eb40bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=543a120c-fe9d-4a67-97ba-c2c1812f23a8,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=543a120c-fe9d-4a67-97ba-c2c1812f23a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rook-ceph-detect-version-px2cj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=543a120c-fe9d-4a67-97ba-c2c1812f23a8;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=543a120c-fe9d-4a67-97ba-c2c1812f23a8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aaa8eb40bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 identity=55220 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=543a120c-fe9d-4a67-97ba-c2c1812f23a8,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=543a120c-fe9d-4a67-97ba-c2c1812f23a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rook-ceph-detect-version-px2cj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aaa8eb40bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 identity=55220 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rook-ceph-detect-version-px2cj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aaa8eb40bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=927 identity=55220 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rook-ceph-detect-version-px2cj subsys=endpoint level=info msg="Successful endpoint creation" containerID=aaa8eb40bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=927 identity=55220 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rook-ceph-detect-version-px2cj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aaa8eb40bf endpointID=927 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-px2cj subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=543a120c-fe9d-4a67-97ba-c2c1812f23a8 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=543a120c-fe9d-4a67-97ba-c2c1812f23a8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=aaa8eb40bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=927 identity=55220 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rook-ceph-detect-version-px2cj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 2fc2d5c3-1bb2-4e4c-aaf7-5d4cf873d560 default }" containerID=ee93f8d000c8c6cc4c133c9a7c6fd6886d8e3a4c1aa6adeffb24d2f9f5643ab9 datapathConfiguration="&{false false false false false }" interface=lxce44dd343e2c0 k8sPodName=openstack/ceph-object-controller-detect-version-qs2sr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee93f8d000 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qs2sr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee93f8d000 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=d2140a3a-6123-42c3-99db-fc0da97e8775,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=d2140a3a-6123-42c3-99db-fc0da97e8775,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qs2sr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=d2140a3a-6123-42c3-99db-fc0da97e8775;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=d2140a3a-6123-42c3-99db-fc0da97e8775;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee93f8d000 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identity=21439 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=d2140a3a-6123-42c3-99db-fc0da97e8775,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=d2140a3a-6123-42c3-99db-fc0da97e8775,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qs2sr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ee93f8d000 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identity=21439 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qs2sr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee93f8d000 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=8 identity=21439 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qs2sr subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee93f8d000 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=8 identity=21439 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qs2sr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ee93f8d000 endpointID=8 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-qs2sr subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=d2140a3a-6123-42c3-99db-fc0da97e8775 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=d2140a3a-6123-42c3-99db-fc0da97e8775 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=ee93f8d000 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=8 identity=21439 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qs2sr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 2053a3e1-e459-4f3b-bf91-2f8ea94baf0b default }" containerID=f44c4886d620d68aba6608d2997f5bb5936ef6457ee8fd3c22cafab9453193a3 datapathConfiguration="&{false false false false false }" interface=lxc0eecdfb80197 k8sPodName=local-path-storage/helper-pod-create-pvc-e9044327-d09c-4e76-a4d8-2652a83c0664 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f44c4886d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9044327-d09c-4e76-a4d8-2652a83c0664 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f44c4886d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9044327-d09c-4e76-a4d8-2652a83c0664 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f44c4886d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 identity=52605 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9044327-d09c-4e76-a4d8-2652a83c0664 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f44c4886d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 identity=52605 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9044327-d09c-4e76-a4d8-2652a83c0664 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f44c4886d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1077 identity=52605 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9044327-d09c-4e76-a4d8-2652a83c0664 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f44c4886d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1077 identity=52605 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9044327-d09c-4e76-a4d8-2652a83c0664 subsys=daemon level=info msg="Delete endpoint request" containerID=f44c4886d6 endpointID=1077 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e9044327-d09c-4e76-a4d8-2652a83c0664 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f44c4886d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1077 identity=52605 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9044327-d09c-4e76-a4d8-2652a83c0664 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 d7f8cb8c-9abb-4c27-9977-ad674a1f3693 default }" containerID=5ec3074fa68a716e30d35c7a16592c07cabaa3c7576e66ce3efbf0878082208f datapathConfiguration="&{false false false false false }" interface=lxcf47f47df1dbb k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ec3074fa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3721 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ec3074fa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3721 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ec3074fa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3721 identity=21628 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ec3074fa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3721 identity=21628 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5ec3074fa6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3721 identity=21628 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ec3074fa6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3721 identity=21628 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.92 9de0fc43-62e4-46d6-9f6e-c09428d71861 default }" containerID=5c175fda64eda0369916d57c04fda280e31c8da1b56294ab3859d0a1266014b5 datapathConfiguration="&{false false false false false }" interface=lxc66f763724db3 k8sPodName=openstack/glance-db-init-bqzzx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c175fda64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-init-bqzzx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c175fda64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=294e4c11-ba0d-42df-bf6b-b60432abbd8f,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=294e4c11-ba0d-42df-bf6b-b60432abbd8f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-init-bqzzx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=294e4c11-ba0d-42df-bf6b-b60432abbd8f;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=294e4c11-ba0d-42df-bf6b-b60432abbd8f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c175fda64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 identity=31112 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=294e4c11-ba0d-42df-bf6b-b60432abbd8f,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=294e4c11-ba0d-42df-bf6b-b60432abbd8f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-init-bqzzx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5c175fda64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 identity=31112 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-init-bqzzx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c175fda64 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=363 identity=31112 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-init-bqzzx subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c175fda64 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=363 identity=31112 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-init-bqzzx subsys=daemon level=info msg="Delete endpoint request" containerID=5c175fda64 endpointID=363 k8sNamespace=openstack k8sPodName=glance-db-init-bqzzx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=294e4c11-ba0d-42df-bf6b-b60432abbd8f k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=294e4c11-ba0d-42df-bf6b-b60432abbd8f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5c175fda64 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=363 identity=31112 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-init-bqzzx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 93b6e5e2-93c9-475b-8e8d-e7f9a82cb554 default }" containerID=e941b64cc3125704e419fdde10396c9f8f4dc741775c50b9fa2e362c48c709ff datapathConfiguration="&{false false false false false }" interface=lxc9b37ed067b68 k8sPodName=openstack/glance-db-sync-b2hsh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e941b64cc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-db-sync-b2hsh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e941b64cc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2ca75afa-acbe-4b9c-9d0f-c3d2968221a5,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=2ca75afa-acbe-4b9c-9d0f-c3d2968221a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-db-sync-b2hsh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2ca75afa-acbe-4b9c-9d0f-c3d2968221a5;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=2ca75afa-acbe-4b9c-9d0f-c3d2968221a5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e941b64cc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identity=41318 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2ca75afa-acbe-4b9c-9d0f-c3d2968221a5,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=2ca75afa-acbe-4b9c-9d0f-c3d2968221a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-db-sync-b2hsh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e941b64cc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identity=41318 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-db-sync-b2hsh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e941b64cc3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3916 identity=41318 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-db-sync-b2hsh subsys=endpoint level=info msg="Successful endpoint creation" containerID=e941b64cc3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3916 identity=41318 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-db-sync-b2hsh subsys=daemon level=info msg="Delete endpoint request" containerID=e941b64cc3 endpointID=3916 k8sNamespace=openstack k8sPodName=glance-db-sync-b2hsh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2ca75afa-acbe-4b9c-9d0f-c3d2968221a5 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=2ca75afa-acbe-4b9c-9d0f-c3d2968221a5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e941b64cc3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3916 identity=41318 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-db-sync-b2hsh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 3a7dffc2-71dd-4c52-98db-d3bfcd432e46 default }" containerID=da649c6f6b31431e049d798e071728053b3773c363f8e05b8319746f84fea3d4 datapathConfiguration="&{false false false false false }" interface=lxc092a554f030c k8sPodName=openstack/glance-rabbit-init-9t8w2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da649c6f6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-rabbit-init-9t8w2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da649c6f6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=30adebad-fa97-4fec-8177-35b302696a21,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=30adebad-fa97-4fec-8177-35b302696a21,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-rabbit-init-9t8w2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=30adebad-fa97-4fec-8177-35b302696a21;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=30adebad-fa97-4fec-8177-35b302696a21;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da649c6f6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 identity=31101 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=30adebad-fa97-4fec-8177-35b302696a21,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=30adebad-fa97-4fec-8177-35b302696a21,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-rabbit-init-9t8w2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da649c6f6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 identity=31101 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-rabbit-init-9t8w2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da649c6f6b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=362 identity=31101 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-rabbit-init-9t8w2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=da649c6f6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=362 identity=31101 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-rabbit-init-9t8w2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.105 e11e2b6a-efcc-4c7b-a691-39e0d1a15f20 default }" containerID=c021cacdbab3b09f8365a2102659d7d6f53e2bbaed03f6deb70882d9d62369e2 datapathConfiguration="&{false false false false false }" interface=lxc9cc270a3dfea k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4jjtk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c021cacdba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3076 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4jjtk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c021cacdba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3076 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4jjtk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c021cacdba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3076 identity=17823 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4jjtk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c021cacdba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3076 identity=17823 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4jjtk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 076d168b-c9e0-4495-94de-43749a490e76 default }" containerID=47e12aeec430f84beceb025599ba4dc9ac821b57a303d3aab327c3370e5ad6d6 datapathConfiguration="&{false false false false false }" interface=lxc69345c4fb910 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lkcjh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47e12aeec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lkcjh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47e12aeec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lkcjh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47e12aeec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identity=2867 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lkcjh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47e12aeec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identity=2867 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lkcjh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c021cacdba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3076 identity=17823 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4jjtk subsys=endpoint level=info msg="Successful endpoint creation" containerID=c021cacdba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3076 identity=17823 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4jjtk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=47e12aeec4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=318 identity=2867 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lkcjh subsys=endpoint level=info msg="Successful endpoint creation" containerID=47e12aeec4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=318 identity=2867 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lkcjh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=da649c6f6b endpointID=362 k8sNamespace=openstack k8sPodName=glance-rabbit-init-9t8w2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=30adebad-fa97-4fec-8177-35b302696a21 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=30adebad-fa97-4fec-8177-35b302696a21 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=da649c6f6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=362 identity=31101 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-rabbit-init-9t8w2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 89d967bc-2ee5-4a9b-92cc-cf07fb46ee44 default }" containerID=892586fea32ee4abf44c161ce5e8a8bc41d6901a8b0a91c9928bf715c40fb07e datapathConfiguration="&{false false false false false }" interface=lxcb80554d3441f k8sPodName=openstack/glance-ks-service-f782l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=892586fea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2149 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-service-f782l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=892586fea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2149 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0ea2cedb-c8c5-43af-b0f6-d5f269f0c97f,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=0ea2cedb-c8c5-43af-b0f6-d5f269f0c97f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-service-f782l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0ea2cedb-c8c5-43af-b0f6-d5f269f0c97f;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=0ea2cedb-c8c5-43af-b0f6-d5f269f0c97f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=892586fea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2149 identity=10571 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0ea2cedb-c8c5-43af-b0f6-d5f269f0c97f,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=0ea2cedb-c8c5-43af-b0f6-d5f269f0c97f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-service-f782l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=892586fea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2149 identity=10571 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-service-f782l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=892586fea3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2149 identity=10571 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-service-f782l subsys=endpoint level=info msg="Successful endpoint creation" containerID=892586fea3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2149 identity=10571 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-service-f782l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=892586fea3 endpointID=2149 k8sNamespace=openstack k8sPodName=glance-ks-service-f782l subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0ea2cedb-c8c5-43af-b0f6-d5f269f0c97f k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=0ea2cedb-c8c5-43af-b0f6-d5f269f0c97f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=892586fea3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2149 identity=10571 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-ks-service-f782l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 5824c842-7b83-4f64-8e5d-f9b45f895064 default }" containerID=f9dd77d8373450e615822bd2b80c06b6ad01e201fbe754854727f64553794b48 datapathConfiguration="&{false false false false false }" interface=lxc2f124ee006f3 k8sPodName=openstack/glance-ks-endpoints-qln95 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9dd77d837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3252 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-ks-endpoints-qln95 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9dd77d837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3252 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d41cd2d4-6ab5-4624-8d4f-d4866a1e9a55,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d41cd2d4-6ab5-4624-8d4f-d4866a1e9a55,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-ks-endpoints-qln95 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d41cd2d4-6ab5-4624-8d4f-d4866a1e9a55;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=d41cd2d4-6ab5-4624-8d4f-d4866a1e9a55;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9dd77d837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3252 identity=43141 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d41cd2d4-6ab5-4624-8d4f-d4866a1e9a55,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d41cd2d4-6ab5-4624-8d4f-d4866a1e9a55,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-ks-endpoints-qln95 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9dd77d837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3252 identity=43141 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-ks-endpoints-qln95 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9dd77d837 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3252 identity=43141 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-ks-endpoints-qln95 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9dd77d837 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3252 identity=43141 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-ks-endpoints-qln95 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.229 8f88f92e-d4ae-4af3-a7df-9df928221a82 default }" containerID=6abad6dd57a7a4b3fe72e587f210c480eee866252aa7bc12066faa767436f427 datapathConfiguration="&{false false false false false }" interface=lxc4d6a64552c88 k8sPodName=openstack/ceph-object-controller-detect-version-p8g8d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6abad6dd57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-p8g8d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6abad6dd57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=4a8bf20d-24e5-4a2b-b1e7-638e3c36fdb1,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=4a8bf20d-24e5-4a2b-b1e7-638e3c36fdb1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-p8g8d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=4a8bf20d-24e5-4a2b-b1e7-638e3c36fdb1;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=4a8bf20d-24e5-4a2b-b1e7-638e3c36fdb1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6abad6dd57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identity=775 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=4a8bf20d-24e5-4a2b-b1e7-638e3c36fdb1,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=4a8bf20d-24e5-4a2b-b1e7-638e3c36fdb1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-p8g8d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6abad6dd57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identity=775 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-p8g8d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6abad6dd57 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1104 identity=775 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-p8g8d subsys=endpoint level=info msg="Successful endpoint creation" containerID=6abad6dd57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1104 identity=775 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-p8g8d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6abad6dd57 endpointID=1104 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-p8g8d subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=4a8bf20d-24e5-4a2b-b1e7-638e3c36fdb1 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=4a8bf20d-24e5-4a2b-b1e7-638e3c36fdb1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=6abad6dd57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1104 identity=775 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-p8g8d subsys=endpoint level=info msg="Delete endpoint request" containerID=f9dd77d837 endpointID=3252 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-qln95 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d41cd2d4-6ab5-4624-8d4f-d4866a1e9a55 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=d41cd2d4-6ab5-4624-8d4f-d4866a1e9a55 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f9dd77d837 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3252 identity=43141 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-ks-endpoints-qln95 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 80d32e92-866c-40a8-ae62-d0a3b48df607 default }" containerID=983efdf4fd7f9a7b940dca48e060ae2783065e16df894b9bcb26319a06676db7 datapathConfiguration="&{false false false false false }" interface=lxc8c1356a092a5 k8sPodName=openstack/glance-ks-user-7rc2x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=983efdf4fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2267 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-user-7rc2x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=983efdf4fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2267 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=93e3ccd3-c3ef-4a4c-ad18-523a1f600239,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=93e3ccd3-c3ef-4a4c-ad18-523a1f600239,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-user-7rc2x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=983efdf4fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2267 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-user-7rc2x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=93e3ccd3-c3ef-4a4c-ad18-523a1f600239;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=93e3ccd3-c3ef-4a4c-ad18-523a1f600239;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=983efdf4fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2267 identity=57192 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=93e3ccd3-c3ef-4a4c-ad18-523a1f600239,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=93e3ccd3-c3ef-4a4c-ad18-523a1f600239,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-user-7rc2x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=983efdf4fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2267 identity=57192 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-user-7rc2x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=983efdf4fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2267 identity=57192 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-user-7rc2x subsys=endpoint level=info msg="Successful endpoint creation" containerID=983efdf4fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2267 identity=57192 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-user-7rc2x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=983efdf4fd endpointID=2267 k8sNamespace=openstack k8sPodName=glance-ks-user-7rc2x subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=93e3ccd3-c3ef-4a4c-ad18-523a1f600239 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=93e3ccd3-c3ef-4a4c-ad18-523a1f600239 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=983efdf4fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2267 identity=57192 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-ks-user-7rc2x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 279ee851-88a7-4575-9821-af1cf3f0aa34 default }" containerID=3d5e4e87f60a18761f1c94727300b5747cae5093b0e726b5d072ee618e8562a1 datapathConfiguration="&{false false false false false }" interface=lxc287b50a943c9 k8sPodName=openstack/glance-metadefs-load-v44r2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d5e4e87f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-metadefs-load-v44r2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d5e4e87f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=90c8a2ac-7a05-443c-ab2c-bec36c44e803,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=90c8a2ac-7a05-443c-ab2c-bec36c44e803,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-metadefs-load-v44r2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=90c8a2ac-7a05-443c-ab2c-bec36c44e803;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=90c8a2ac-7a05-443c-ab2c-bec36c44e803;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d5e4e87f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identity=33727 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=90c8a2ac-7a05-443c-ab2c-bec36c44e803,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=90c8a2ac-7a05-443c-ab2c-bec36c44e803,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-metadefs-load-v44r2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d5e4e87f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identity=33727 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-metadefs-load-v44r2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3d5e4e87f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=137 identity=33727 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-metadefs-load-v44r2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d5e4e87f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=137 identity=33727 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-metadefs-load-v44r2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3d5e4e87f6 endpointID=137 k8sNamespace=openstack k8sPodName=glance-metadefs-load-v44r2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=90c8a2ac-7a05-443c-ab2c-bec36c44e803 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=90c8a2ac-7a05-443c-ab2c-bec36c44e803 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3d5e4e87f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=137 identity=33727 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/glance-metadefs-load-v44r2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 2dac649e-5dbe-4a9a-8150-310a5db3b242 default }" containerID=db2436d48e31674186a76b858dcaf87648921508c8789031e488c3bc1754bffe datapathConfiguration="&{false false false false false }" interface=lxcfc35bf552e42 k8sPodName=openstack/glance-storage-init-8xvx6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db2436d48e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-storage-init-8xvx6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db2436d48e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d7563dff-0e07-4037-8162-6d8495175b02,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=d7563dff-0e07-4037-8162-6d8495175b02,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-storage-init-8xvx6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d7563dff-0e07-4037-8162-6d8495175b02;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=d7563dff-0e07-4037-8162-6d8495175b02;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db2436d48e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 identity=13638 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d7563dff-0e07-4037-8162-6d8495175b02,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=d7563dff-0e07-4037-8162-6d8495175b02,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-storage-init-8xvx6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db2436d48e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 identity=13638 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-storage-init-8xvx6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=db2436d48e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=173 identity=13638 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-storage-init-8xvx6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=db2436d48e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=173 identity=13638 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-storage-init-8xvx6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=db2436d48e endpointID=173 k8sNamespace=openstack k8sPodName=glance-storage-init-8xvx6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d7563dff-0e07-4037-8162-6d8495175b02 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=d7563dff-0e07-4037-8162-6d8495175b02 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=db2436d48e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=173 identity=13638 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-storage-init-8xvx6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 f5ce2943-027a-4864-adb2-d823010441cd default }" containerID=54ef0cc46286fc84a81864e8da47726f890f0dbd9660cdf4abf488266951adfb datapathConfiguration="&{false false false false false }" interface=lxc917d6b4d4755 k8sPodName=openstack/glance-api-69bdbbf86c-mljc9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54ef0cc462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-api-69bdbbf86c-mljc9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54ef0cc462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-api-69bdbbf86c-mljc9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=54ef0cc462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-api-69bdbbf86c-mljc9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54ef0cc462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 identity=18048 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-api-69bdbbf86c-mljc9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54ef0cc462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 identity=18048 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-api-69bdbbf86c-mljc9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=54ef0cc462 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2623 identity=18048 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-api-69bdbbf86c-mljc9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=54ef0cc462 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2623 identity=18048 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-api-69bdbbf86c-mljc9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.208 c41e0f71-0f0d-4b15-988e-9e156a4769ad default }" containerID=86f3014ee1033a41f7f93df47a495c4c37bc812d338714db1445d25c96957790 datapathConfiguration="&{false false false false false }" interface=lxcffeac1a9968c k8sPodName=openstack/staffeln-api-5c8dbc679b-wx75h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86f3014ee1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1457 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-api-5c8dbc679b-wx75h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86f3014ee1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1457 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-api-5c8dbc679b-wx75h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86f3014ee1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1457 identity=2569 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-api-5c8dbc679b-wx75h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86f3014ee1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1457 identity=2569 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-api-5c8dbc679b-wx75h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.109 637cf794-e4cc-4407-975c-d8ca921783b9 default }" containerID=bb438bba2b19612d2b22580c6974dd54717c708887fc9ec0439638f2d984d540 datapathConfiguration="&{false false false false false }" interface=lxc9d61d08044ba k8sPodName=openstack/staffeln-db-init-5kqpf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb438bba2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3070 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/staffeln-db-init-5kqpf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb438bba2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3070 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=aa1ad09c-0e7c-4205-a777-b3192a52f214,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=aa1ad09c-0e7c-4205-a777-b3192a52f214,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/staffeln-db-init-5kqpf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.242 b0bbee75-79dc-401e-b7a2-0301732a802c default }" containerID=42c0355420f57578b63899576a9325d051932e0f71605de5938a81eeb7c8e91f datapathConfiguration="&{false false false false false }" interface=lxc3fb6e1b01dbd k8sPodName=openstack/staffeln-conductor-d4b8b784c-glzn5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42c0355420 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2514 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-conductor-d4b8b784c-glzn5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42c0355420 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2514 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-conductor-d4b8b784c-glzn5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=aa1ad09c-0e7c-4205-a777-b3192a52f214;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=aa1ad09c-0e7c-4205-a777-b3192a52f214;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb438bba2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3070 identity=11962 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=aa1ad09c-0e7c-4205-a777-b3192a52f214,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=aa1ad09c-0e7c-4205-a777-b3192a52f214,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/staffeln-db-init-5kqpf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb438bba2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3070 identity=11962 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/staffeln-db-init-5kqpf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42c0355420 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2514 identity=26263 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-conductor-d4b8b784c-glzn5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42c0355420 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2514 identity=26263 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-conductor-d4b8b784c-glzn5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=86f3014ee1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1457 identity=2569 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-api-5c8dbc679b-wx75h subsys=endpoint level=info msg="Successful endpoint creation" containerID=86f3014ee1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1457 identity=2569 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/staffeln-api-5c8dbc679b-wx75h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bb438bba2b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3070 identity=11962 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/staffeln-db-init-5kqpf subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb438bba2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3070 identity=11962 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/staffeln-db-init-5kqpf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=42c0355420 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2514 identity=26263 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-conductor-d4b8b784c-glzn5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=42c0355420 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2514 identity=26263 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-conductor-d4b8b784c-glzn5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bb438bba2b endpointID=3070 k8sNamespace=openstack k8sPodName=staffeln-db-init-5kqpf subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=aa1ad09c-0e7c-4205-a777-b3192a52f214 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=aa1ad09c-0e7c-4205-a777-b3192a52f214 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=bb438bba2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3070 identity=11962 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/staffeln-db-init-5kqpf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 6aacdad5-ad2c-44de-8e8b-85e016116175 default }" containerID=ba34a927dd451491f0a61b235a5dc643edb3b7b6107e8cd41b4dd5cb263ec95d datapathConfiguration="&{false false false false false }" interface=lxc815986cc8a79 k8sPodName=openstack/staffeln-db-sync-rwshd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba34a927dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3572 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-db-sync-rwshd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba34a927dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3572 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e5c4054f-6fad-4a83-9658-fc5800a387f5,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=e5c4054f-6fad-4a83-9658-fc5800a387f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-db-sync-rwshd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ba34a927dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3572 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-db-sync-rwshd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=e5c4054f-6fad-4a83-9658-fc5800a387f5;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=e5c4054f-6fad-4a83-9658-fc5800a387f5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba34a927dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3572 identity=9838 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e5c4054f-6fad-4a83-9658-fc5800a387f5,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=e5c4054f-6fad-4a83-9658-fc5800a387f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-db-sync-rwshd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba34a927dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3572 identity=9838 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-db-sync-rwshd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba34a927dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3572 identity=9838 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-db-sync-rwshd subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba34a927dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3572 identity=9838 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/staffeln-db-sync-rwshd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager