level=info msg="Memory available for map entries (0.003% of 67421646848B): 168554117B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.240475ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="61.882µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.057611ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.451µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=98.415121ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="11.591µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="15.461µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="52.381µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="52.651µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="58.901µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="660.369µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.63µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=25.74633ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.312803ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="36.771µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="37.051µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="228.217µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="92.742µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="93.462µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=48.253418ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="122.913µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="18.061µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.88µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.227.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.316562ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="5.1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.326257ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.77µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.778906ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="6.96µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="5.34µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.07µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.881µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="11.45µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="36.251µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="93.252µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="75.682µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="364.191µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.901µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.35µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="267.798µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="954.668µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.189464ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.35µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="18.681µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.227 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.227 ipAddr.ipv6="" k8sNodeIP=199.204.45.227 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.227" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.158" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.227" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.227} {CiliumInternalIP 10.0.0.158}] 10.0.0.0/24 [] [] 10.0.0.62 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:46137" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.420642002s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="14.97µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="30.451µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="94.123µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="6.52µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3327 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3327 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3327 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.470777382s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=294.188433ms file-path=/var/run/cilium/state/templates/e3313380cb6027de4ebe1fae5e6f53db98fa320f2c17d8ebd2c9b84ba2825ce2/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3327 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2547 ipv4=10.0.0.62 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2547 identityLabels="reserved:health" ipv4=10.0.0.62 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2547 identity=4 identityLabels="reserved:health" ipv4=10.0.0.62 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 47f44be5-7f46-41f0-b488-6a013dc68a28 default }" containerID=f55e6f33afb276a5187736970e8903e4d39a181ba67b066451a512cd51a692bf datapathConfiguration="&{false false false false false }" interface=lxcbe42306e14c6 k8sPodName=kube-system/coredns-7c96b6546b-2w54m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f55e6f33af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3264 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2w54m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f55e6f33af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3264 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2w54m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f55e6f33af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3264 identity=34837 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2w54m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f55e6f33af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3264 identity=34837 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2w54m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 4be7d462-06a0-4ab5-9d37-98ff872f05cf default }" containerID=883241bcce4bcdbe603d240086b5c0207acdc7cc98d1ce622633552d56dd6514 datapathConfiguration="&{false false false false false }" interface=lxc76c105b062ad k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-s6rkc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=883241bcce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-s6rkc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=883241bcce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=ca867f33-102e-4511-9f6f-443d5bd17546,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=ca867f33-102e-4511-9f6f-443d5bd17546,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-s6rkc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=ca867f33-102e-4511-9f6f-443d5bd17546;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=ca867f33-102e-4511-9f6f-443d5bd17546;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=883241bcce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 identity=19848 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=ca867f33-102e-4511-9f6f-443d5bd17546,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=ca867f33-102e-4511-9f6f-443d5bd17546,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-s6rkc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=883241bcce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 identity=19848 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-s6rkc subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.062884734s file-path=/var/run/cilium/state/templates/be9d3a85e182d81c9cce179a38df869d921ef61e34675ef1324e1b3cd0d57144/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=883241bcce datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1425 identity=19848 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-s6rkc subsys=endpoint level=info msg="Successful endpoint creation" containerID=883241bcce datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1425 identity=19848 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-s6rkc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2547 identity=4 ipv4=10.0.0.62 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f55e6f33af datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3264 identity=34837 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2w54m subsys=endpoint level=info msg="Successful endpoint creation" containerID=f55e6f33af datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3264 identity=34837 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2w54m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=883241bcce endpointID=1425 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-s6rkc subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=ca867f33-102e-4511-9f6f-443d5bd17546 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=ca867f33-102e-4511-9f6f-443d5bd17546 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=883241bcce datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1425 identity=19848 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-s6rkc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 e2788a04-4cce-4c57-97f0-c8088afec653 default }" containerID=270588c248d99a1080663fe2cbc443e73e57695100358dd18c67ad220622fe47 datapathConfiguration="&{false false false false false }" interface=lxc279e50520bb2 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b8zhf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=270588c248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 ipv4=10.0.0.68 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b8zhf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=270588c248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.68 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b8zhf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=270588c248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 identity=17730 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.68 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b8zhf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=270588c248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 identity=17730 ipv4=10.0.0.68 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b8zhf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=270588c248 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1994 identity=17730 ipv4=10.0.0.68 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b8zhf subsys=endpoint level=info msg="Successful endpoint creation" containerID=270588c248 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1994 identity=17730 ipv4=10.0.0.68 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b8zhf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3327 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03327 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03327 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03327 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03327:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3327 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 d4b64908-ec99-4f94-90ca-d1e49020f16a default }" containerID=945f32e87c60df43349285618f90f55c910a8f72a4154d0e92eb64c11d836ea7 datapathConfiguration="&{false false false false false }" interface=lxc56619e83f204 k8sPodName=kube-system/coredns-67659f764b-j69fn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=945f32e87c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 ipv4=10.0.0.154 ipv6= k8sPodName=kube-system/coredns-67659f764b-j69fn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=945f32e87c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.154 ipv6= k8sPodName=kube-system/coredns-67659f764b-j69fn subsys=endpoint level=info msg="Identity of endpoint changed" containerID=945f32e87c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 identity=34837 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.154 ipv6= k8sPodName=kube-system/coredns-67659f764b-j69fn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=945f32e87c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 identity=34837 ipv4=10.0.0.154 ipv6= k8sPodName=kube-system/coredns-67659f764b-j69fn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=945f32e87c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=460 identity=34837 ipv4=10.0.0.154 ipv6= k8sPodName=kube-system/coredns-67659f764b-j69fn subsys=endpoint level=info msg="Successful endpoint creation" containerID=945f32e87c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=460 identity=34837 ipv4=10.0.0.154 ipv6= k8sPodName=kube-system/coredns-67659f764b-j69fn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.11 93095f49-ab1c-4a01-8f61-8763a57c03a1 default }" containerID=7fef83d7a20c13d3cb0b6432a3c40f8634f868d2370805ed7306128d73e752ef datapathConfiguration="&{false false false false false }" interface=lxccf722f368b9f k8sPodName=kube-system/coredns-67659f764b-sjsf6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7fef83d7a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 ipv4=10.0.0.11 ipv6= k8sPodName=kube-system/coredns-67659f764b-sjsf6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7fef83d7a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.11 ipv6= k8sPodName=kube-system/coredns-67659f764b-sjsf6 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7fef83d7a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 identity=34837 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.11 ipv6= k8sPodName=kube-system/coredns-67659f764b-sjsf6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7fef83d7a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 identity=34837 ipv4=10.0.0.11 ipv6= k8sPodName=kube-system/coredns-67659f764b-sjsf6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7fef83d7a2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1365 identity=34837 ipv4=10.0.0.11 ipv6= k8sPodName=kube-system/coredns-67659f764b-sjsf6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7fef83d7a2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1365 identity=34837 ipv4=10.0.0.11 ipv6= k8sPodName=kube-system/coredns-67659f764b-sjsf6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.69 647d63ce-3ec4-49fb-83a4-3a5480e8687e default }" containerID=f1374af189cd969880f0d59bfdc6c5c2e41187f1186d3bd0e6bae941293ac2e1 datapathConfiguration="&{false false false false false }" interface=lxc5ea0eb29fad0 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6vhxk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1374af189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6vhxk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1374af189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6vhxk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1374af189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 identity=8882 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6vhxk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f1374af189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 identity=8882 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6vhxk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f1374af189 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2416 identity=8882 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6vhxk subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1374af189 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2416 identity=8882 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6vhxk subsys=daemon level=info msg="Delete endpoint request" containerID=f55e6f33af endpointID=3264 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-2w54m subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=f55e6f33af datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3264 identity=34837 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2w54m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 fadac785-4280-4193-ab99-27d9d489c701 default }" containerID=e7b9616174516a237e07e57308bd9159d7619ff19f10a8b8d3d874fb6101de0a datapathConfiguration="&{false false false false false }" interface=lxca304b8bb1436 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qgzjt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7b9616174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 ipv4=10.0.0.123 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qgzjt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 d5211fab-91d6-43d6-8512-02f4fff97127 default }" containerID=4a7ce28f8a3f65908d8512b4c61f82c841e728f51b8f6088d7cd99f8fdad8139 datapathConfiguration="&{false false false false false }" interface=lxc3fe229b0cc49 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rc92n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a7ce28f8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1711 ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rc92n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a7ce28f8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1711 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rc92n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=e7b9616174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.123 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qgzjt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4a7ce28f8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1711 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rc92n line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=e7b9616174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.123 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qgzjt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a7ce28f8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1711 identity=30058 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rc92n oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=4a7ce28f8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1711 identity=30058 ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rc92n subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7b9616174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 identity=19854 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.123 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qgzjt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7b9616174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 identity=19854 ipv4=10.0.0.123 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qgzjt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 6add5248-c8f3-4fbf-a76a-89062526beb3 default }" containerID=e11a7e17dceacd40fd00d3c95309eb22fe36a9f6c07e1cc05bef9150d811904d datapathConfiguration="&{false false false false false }" interface=lxcba4f99692da4 k8sPodName=cert-manager/cert-manager-75c4c745bc-vsb59 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e11a7e17dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 ipv4=10.0.0.188 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vsb59 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e11a7e17dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.188 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vsb59 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e11a7e17dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identity=1939 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.188 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vsb59 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e11a7e17dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identity=1939 ipv4=10.0.0.188 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vsb59 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7b9616174 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3980 identity=19854 ipv4=10.0.0.123 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qgzjt subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7b9616174 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3980 identity=19854 ipv4=10.0.0.123 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qgzjt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4a7ce28f8a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1711 identity=30058 ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rc92n subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a7ce28f8a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1711 identity=30058 ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rc92n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e11a7e17dc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=416 identity=1939 ipv4=10.0.0.188 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vsb59 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e11a7e17dc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=416 identity=1939 ipv4=10.0.0.188 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vsb59 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.196 28975fa9-2c3b-4586-b669-bb67d0bc3150 default }" containerID=4054b787e39d475beed9765fb5e78c8be15ce7b7be6ed40fa64f53c0f6da9585 datapathConfiguration="&{false false false false false }" interface=lxc81178a55ab52 k8sPodName=cert-manager/cert-manager-startupapicheck-6p2f7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4054b787e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2394 ipv4=10.0.0.196 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-6p2f7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4054b787e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2394 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=bd9d5270-bae8-4ebd-bd66-c723c58ef079,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=bd9d5270-bae8-4ebd-bd66-c723c58ef079,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.196 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-6p2f7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=bd9d5270-bae8-4ebd-bd66-c723c58ef079;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=bd9d5270-bae8-4ebd-bd66-c723c58ef079;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4054b787e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2394 identity=38838 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=bd9d5270-bae8-4ebd-bd66-c723c58ef079,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=bd9d5270-bae8-4ebd-bd66-c723c58ef079,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.196 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-6p2f7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4054b787e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2394 identity=38838 ipv4=10.0.0.196 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-6p2f7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4054b787e3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2394 identity=38838 ipv4=10.0.0.196 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-6p2f7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4054b787e3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2394 identity=38838 ipv4=10.0.0.196 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-6p2f7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4054b787e3 endpointID=2394 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-6p2f7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=bd9d5270-bae8-4ebd-bd66-c723c58ef079 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=bd9d5270-bae8-4ebd-bd66-c723c58ef079 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=4054b787e3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2394 identity=38838 ipv4=10.0.0.196 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-6p2f7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 9a283440-5a6e-4e9f-90bb-9e1e026c89df default }" containerID=235f28c3f530d5757a9bba3488cab3696f9707bfdc607be135cfcd951aeb7278 datapathConfiguration="&{false false false false false }" interface=lxcfaac0c253809 k8sPodName=ingress-nginx/ingress-nginx-admission-create-7srps labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=235f28c3f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7srps subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=235f28c3f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4fdfff98-f995-45e7-8937-5a4456812e09,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=4fdfff98-f995-45e7-8937-5a4456812e09,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7srps subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=4fdfff98-f995-45e7-8937-5a4456812e09;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=4fdfff98-f995-45e7-8937-5a4456812e09;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=235f28c3f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 identity=38234 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4fdfff98-f995-45e7-8937-5a4456812e09,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=4fdfff98-f995-45e7-8937-5a4456812e09,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7srps oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=235f28c3f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 identity=38234 ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7srps subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=235f28c3f5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1133 identity=38234 ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7srps subsys=endpoint level=info msg="Successful endpoint creation" containerID=235f28c3f5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1133 identity=38234 ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7srps subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=235f28c3f5 endpointID=1133 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-7srps subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=4fdfff98-f995-45e7-8937-5a4456812e09 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=4fdfff98-f995-45e7-8937-5a4456812e09 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=235f28c3f5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1133 identity=38234 ipv4=10.0.0.47 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7srps subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 945577f9-2b2e-4d24-9520-a1efb5f9f9cc default }" containerID=135b9cb6106360f445bfa14b122f2b1cadec725b5eaacd5f239b8e470623b5a2 datapathConfiguration="&{false false false false false }" interface=lxc7620caba7553 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6z9n8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=135b9cb610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 ipv4=10.0.0.149 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6z9n8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=135b9cb610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.149 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6z9n8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=135b9cb610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.149 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6z9n8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=135b9cb610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 identity=5983 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.149 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6z9n8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=135b9cb610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 identity=5983 ipv4=10.0.0.149 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6z9n8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=135b9cb610 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1270 identity=5983 ipv4=10.0.0.149 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6z9n8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=135b9cb610 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1270 identity=5983 ipv4=10.0.0.149 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-6z9n8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.9 99780df4-2221-4c2c-8b5c-7b4d1df18327 default }" containerID=ec625417a1952401a7d00d2b52e9d4ede54627a8ff2cb085857cd515bcf877ab datapathConfiguration="&{false false false false false }" interface=lxc4d888e6f977e k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bkktg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec625417a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 ipv4=10.0.0.9 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bkktg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec625417a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=220bb545-29fb-4716-8ea9-3a10cf18b4d0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=220bb545-29fb-4716-8ea9-3a10cf18b4d0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.9 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bkktg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=220bb545-29fb-4716-8ea9-3a10cf18b4d0;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=220bb545-29fb-4716-8ea9-3a10cf18b4d0;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec625417a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identity=3306 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=220bb545-29fb-4716-8ea9-3a10cf18b4d0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=220bb545-29fb-4716-8ea9-3a10cf18b4d0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.9 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bkktg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec625417a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identity=3306 ipv4=10.0.0.9 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bkktg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec625417a1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1151 identity=3306 ipv4=10.0.0.9 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bkktg subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec625417a1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1151 identity=3306 ipv4=10.0.0.9 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bkktg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ec625417a1 endpointID=1151 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-bkktg subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=220bb545-29fb-4716-8ea9-3a10cf18b4d0 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=220bb545-29fb-4716-8ea9-3a10cf18b4d0 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=ec625417a1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1151 identity=3306 ipv4=10.0.0.9 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bkktg subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=3f2657b1-ee09-4f9d-8002-2ae5413eff52] Description:}]" policyAddRequest=0d3256d8-2585-4d5a-ad27-fa30d0a75ca9 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0d3256d8-2585-4d5a-ad27-fa30d0a75ca9 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=7299cc87-527a-4374-b906-cf70f1daf938] Description:}]" policyAddRequest=da16e092-e9ac-46f3-ac64-5203ea803ba6 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=da16e092-e9ac-46f3-ac64-5203ea803ba6 policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.79 5f233253-7816-4023-99bb-e03cb8d05540 default }" containerID=22dc367d7aed1a4196d30cf6f1ab66df667b31729a8e0cb99a28bd263b939dac datapathConfiguration="&{false false false false false }" interface=lxc6f6ad8a3053d k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-km8nk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22dc367d7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-km8nk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22dc367d7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-km8nk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.8.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=22dc367d7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-km8nk line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=22dc367d7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identity=50219 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-km8nk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22dc367d7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identity=50219 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-km8nk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22dc367d7a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=380 identity=50219 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-km8nk subsys=endpoint level=info msg="Successful endpoint creation" containerID=22dc367d7a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=380 identity=50219 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-km8nk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.100 c4b382dc-3d13-4331-89e8-eac3ab5093b3 default }" containerID=e052cfa18550a98c175caf11b495f1b832f5f21e26b0ca8c56aaef1cb6dc900c datapathConfiguration="&{false false false false false }" interface=lxca63f45fe651e k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-dgxdd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e052cfa185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=936 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-dgxdd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e052cfa185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=936 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-dgxdd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.13.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e052cfa185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=936 identity=811 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-dgxdd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e052cfa185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=936 identity=811 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-dgxdd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e052cfa185 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=936 identity=811 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-dgxdd subsys=endpoint level=info msg="Successful endpoint creation" containerID=e052cfa185 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=936 identity=811 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-dgxdd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.245 0ae6aab9-118c-4789-9d7f-d0ecf18186d6 default }" containerID=3a87d7150acf6ac708f031be78d9eb6c6557d74c1bef8696de14ded33efd23d8 datapathConfiguration="&{false false false false false }" interface=lxc1cca7eb11c6b k8sPodName=openstack/pxc-operator-7cff949c8b-zcpft labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a87d7150a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-zcpft subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a87d7150a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-zcpft subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3a87d7150a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.245 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-zcpft line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a87d7150a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identity=40156 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-zcpft oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a87d7150a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identity=40156 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-zcpft subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a87d7150a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=128 identity=40156 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-zcpft subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a87d7150a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=128 identity=40156 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-zcpft subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.41 dbfd0583-fd82-44fb-9523-6fe6e6741d0e default }" containerID=b9e512f34392d87b4e4d0e5463126452e6200f22daf4063ea3bedd3ff283b51d datapathConfiguration="&{false false false false false }" interface=lxccfc8e5a8b669 k8sPodName=local-path-storage/helper-pod-create-pvc-07f56940-4453-4ab8-85fe-51b33f02e59a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9e512f343 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07f56940-4453-4ab8-85fe-51b33f02e59a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9e512f343 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07f56940-4453-4ab8-85fe-51b33f02e59a subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9e512f343 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identity=53991 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07f56940-4453-4ab8-85fe-51b33f02e59a oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b9e512f343 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identity=53991 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07f56940-4453-4ab8-85fe-51b33f02e59a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 5b1b618f-d240-4e64-9683-e413b2f2fc95 default }" containerID=f59a358289d3c7af4e97bda47b9cb88e18e9e6661c92491f2d1f0ba88b946b1b datapathConfiguration="&{false false false false false }" interface=lxc677d929e192b k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f59a358289 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f59a358289 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f59a358289 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identity=46678 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f59a358289 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identity=46678 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b9e512f343 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=940 identity=53991 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07f56940-4453-4ab8-85fe-51b33f02e59a subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9e512f343 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=940 identity=53991 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07f56940-4453-4ab8-85fe-51b33f02e59a subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f59a358289 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1341 identity=46678 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f59a358289 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1341 identity=46678 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b9e512f343 endpointID=940 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-07f56940-4453-4ab8-85fe-51b33f02e59a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b9e512f343 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=940 identity=53991 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07f56940-4453-4ab8-85fe-51b33f02e59a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 09a8bdfc-c372-47f1-972a-b2354e15e62b default }" containerID=f5c7405f2c310306c3406f20f8802668732069fede760331b504661d02dc3aec datapathConfiguration="&{false false false false false }" interface=lxce13596edff52 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5c7405f2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1401 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5c7405f2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1401 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5c7405f2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1401 identity=29121 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5c7405f2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1401 identity=29121 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f5c7405f2c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1401 identity=29121 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5c7405f2c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1401 identity=29121 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=6ec251be-ede2-4b2e-80ca-eadc2ef55489] Description:}]" policyAddRequest=e55974de-e967-4307-a2a0-3b60e8031436 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=e55974de-e967-4307-a2a0-3b60e8031436 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.115 53380a9e-42dc-4755-aec6-282d9ef7218e default }" containerID=121967ffb4370576e6a0d6537f0814bdb569124be94114aac66f09c98f5a227d datapathConfiguration="&{false false false false false }" interface=lxcd2d601305a6a k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=121967ffb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2692 ipv4=10.0.0.115 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=121967ffb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2692 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.115 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=121967ffb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2692 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.115 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=23.0.7;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-20.0.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=121967ffb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2692 identity=2830 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.115 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=121967ffb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2692 identity=2830 ipv4=10.0.0.115 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=121967ffb4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2692 identity=2830 ipv4=10.0.0.115 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=121967ffb4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2692 identity=2830 ipv4=10.0.0.115 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010293938615120322 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.48 8b49b233-61bd-4563-934b-93961795277f default }" containerID=7d47d4ce846bc7a41c25ca20e68fcc511c588d894b472ec7f0c9d681fa30d001 datapathConfiguration="&{false false false false false }" interface=lxcab50711cf8b4 k8sPodName=monitoring/node-feature-discovery-worker-5g978 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d47d4ce84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5g978 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d47d4ce84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5g978 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.47 9ff30dfe-a61c-4910-b992-03a3bff007d0 default }" containerID=81831f06747b2c395bc44b034c8664416022442649447b87e84542c7c53e76e0 datapathConfiguration="&{false false false false false }" interface=lxcf8b0495c89ca k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p6cw9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81831f0674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p6cw9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81831f0674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p6cw9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7d47d4ce84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5g978 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=81831f0674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p6cw9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d47d4ce84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 identity=4900 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5g978 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=7d47d4ce84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 identity=4900 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5g978 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81831f0674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identity=33845 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p6cw9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81831f0674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identity=33845 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p6cw9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81831f0674 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=476 identity=33845 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p6cw9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81831f0674 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=476 identity=33845 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-p6cw9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7d47d4ce84 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2043 identity=4900 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5g978 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d47d4ce84 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2043 identity=4900 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5g978 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.25 523d1efe-242e-48be-955f-8eee1608f488 default }" containerID=c285bddc3ea1065ce45b28d595e74aeb5343df071e9fb11d85865824a2e9f463 datapathConfiguration="&{false false false false false }" interface=lxc83433f35aca7 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lckxt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c285bddc3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lckxt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c285bddc3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lckxt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c285bddc3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 identity=53862 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lckxt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c285bddc3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3386 identity=53862 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lckxt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c285bddc3e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3386 identity=53862 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lckxt subsys=endpoint level=info msg="Successful endpoint creation" containerID=c285bddc3e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3386 identity=53862 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-lckxt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.78 a0524e80-0ab9-473c-a68b-c3515f33ffd3 default }" containerID=1c8d016148fffe77034c9b8dc7da5ddf4688144ff9af169613897f2ff0031dcb datapathConfiguration="&{false false false false false }" interface=lxc5ac36c6da8fb k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z8mlr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c8d016148 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3886 ipv4=10.0.0.78 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z8mlr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c8d016148 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3886 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.78 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z8mlr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c8d016148 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3886 identity=1659 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.78 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z8mlr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c8d016148 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3886 identity=1659 ipv4=10.0.0.78 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z8mlr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c8d016148 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3886 identity=1659 ipv4=10.0.0.78 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z8mlr subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c8d016148 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3886 identity=1659 ipv4=10.0.0.78 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z8mlr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3327 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03327 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03327 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03327 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03327:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3327 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 5232bd80-2944-487c-92d6-4d9b651bbc78 default }" containerID=e803b3feeb33ebd99e1b965df1e61a41e9fa6084aa63cdc280a394641360b0b5 datapathConfiguration="&{false false false false false }" interface=lxc64a2e3265eaf k8sPodName=monitoring/kube-prometheus-stack-admission-create-998s4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e803b3feeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2164 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-998s4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e803b3feeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2164 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=1173ff41-dc5a-4427-b286-cacd5ef6d809,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=1173ff41-dc5a-4427-b286-cacd5ef6d809,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-998s4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=1173ff41-dc5a-4427-b286-cacd5ef6d809;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=1173ff41-dc5a-4427-b286-cacd5ef6d809;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e803b3feeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2164 identity=35382 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=1173ff41-dc5a-4427-b286-cacd5ef6d809,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=1173ff41-dc5a-4427-b286-cacd5ef6d809,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-998s4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e803b3feeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2164 identity=35382 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-998s4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e803b3feeb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2164 identity=35382 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-998s4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e803b3feeb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2164 identity=35382 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-998s4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e803b3feeb endpointID=2164 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-998s4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=1173ff41-dc5a-4427-b286-cacd5ef6d809 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=1173ff41-dc5a-4427-b286-cacd5ef6d809 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=e803b3feeb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2164 identity=35382 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-998s4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 cb0e98c5-65f9-4f75-8930-b4066430ef8e default }" containerID=e8b7ff6b5797fce105dcd544b757e2496936cb1096738f3e92e3dcd25f962156 datapathConfiguration="&{false false false false false }" interface=lxcf387168931a6 k8sPodName=monitoring/kube-prometheus-stack-grafana-7445547486-5mtqv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8b7ff6b57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7445547486-5mtqv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 990aeac6-9c6a-4fc2-aa99-ca5a081e2087 default }" containerID=c2f5df3584fa25aa623e93442ea5c608f59374bdaf0f608226b443e149ee0ae5 datapathConfiguration="&{false false false false false }" interface=lxccc8727355d5d k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-nnrkr labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=e8b7ff6b57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7445547486-5mtqv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=c2f5df3584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-nnrkr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 37b67be3-906c-4f09-a233-2b1ffbf7b487 default }" containerID=b6b5456ac76f3cf629292d09faf6d7fd56e7a3549302a0917c19d7889770763d datapathConfiguration="&{false false false false false }" interface=lxca8da30564546 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-75rn8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6b5456ac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-75rn8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2f5df3584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-nnrkr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6b5456ac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-75rn8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c2f5df3584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-nnrkr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e8b7ff6b57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7445547486-5mtqv line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=e8b7ff6b57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identity=52303 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7445547486-5mtqv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8b7ff6b57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identity=52303 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7445547486-5mtqv subsys=endpoint level=info msg="Invalid state transition skipped" containerID=b6b5456ac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-75rn8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:chart=kube-prometheus-stack-58.2.1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2f5df3584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 identity=12363 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-nnrkr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2f5df3584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 identity=12363 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-nnrkr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6b5456ac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 identity=33268 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-75rn8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b6b5456ac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 identity=33268 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-75rn8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8b7ff6b57 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1339 identity=52303 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7445547486-5mtqv subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8b7ff6b57 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1339 identity=52303 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7445547486-5mtqv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b6b5456ac7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3548 identity=33268 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-75rn8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6b5456ac7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3548 identity=33268 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-75rn8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c2f5df3584 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=698 identity=12363 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-nnrkr subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2f5df3584 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=698 identity=12363 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-nnrkr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.153 6f864b27-a135-45cb-85f8-79e822c936c2 default }" containerID=ccf03e71d7aad5f6b2eaa710447eb9a9cd90dbd228b3a0e4d0301e4850871731 datapathConfiguration="&{false false false false false }" interface=lxc6b2df418760a k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t4nh9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccf03e71d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t4nh9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccf03e71d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=fa745950-dc68-4ead-b0fa-b91be7a7699b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=fa745950-dc68-4ead-b0fa-b91be7a7699b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t4nh9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=fa745950-dc68-4ead-b0fa-b91be7a7699b;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=fa745950-dc68-4ead-b0fa-b91be7a7699b;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccf03e71d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identity=30132 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=fa745950-dc68-4ead-b0fa-b91be7a7699b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=fa745950-dc68-4ead-b0fa-b91be7a7699b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t4nh9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ccf03e71d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identity=30132 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t4nh9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ccf03e71d7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=331 identity=30132 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t4nh9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccf03e71d7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=331 identity=30132 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t4nh9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ccf03e71d7 endpointID=331 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-t4nh9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=fa745950-dc68-4ead-b0fa-b91be7a7699b k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=fa745950-dc68-4ead-b0fa-b91be7a7699b k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=ccf03e71d7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=331 identity=30132 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t4nh9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 72da4d7a-2252-40c9-b884-4c2b614b50e1 default }" containerID=e3a1720acbb9ccef5ba2073787f34e02d855746766ec44645f04f72dbc32044f datapathConfiguration="&{false false false false false }" interface=lxc8bc8d40d0391 k8sPodName=local-path-storage/helper-pod-create-pvc-5251fc65-6cf6-4c2d-a278-9fc377d77534 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3a1720acb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1033 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5251fc65-6cf6-4c2d-a278-9fc377d77534 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3a1720acb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1033 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5251fc65-6cf6-4c2d-a278-9fc377d77534 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3a1720acb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1033 identity=53991 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5251fc65-6cf6-4c2d-a278-9fc377d77534 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3a1720acb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1033 identity=53991 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5251fc65-6cf6-4c2d-a278-9fc377d77534 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3a1720acb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1033 identity=53991 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5251fc65-6cf6-4c2d-a278-9fc377d77534 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3a1720acb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1033 identity=53991 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5251fc65-6cf6-4c2d-a278-9fc377d77534 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.168 c3f58e01-a4d9-4eb1-8bc0-dbb109beb1aa default }" containerID=e4a9808fe18736624b9200bb214a16446b91811e14347d0cc92d0916e1a29e8e datapathConfiguration="&{false false false false false }" interface=lxcecb86759817e k8sPodName=local-path-storage/helper-pod-create-pvc-6404d548-94cc-4197-a099-bd9289ba0294 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4a9808fe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3086 ipv4=10.0.0.168 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6404d548-94cc-4197-a099-bd9289ba0294 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4a9808fe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3086 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.168 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6404d548-94cc-4197-a099-bd9289ba0294 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e4a9808fe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3086 identity=53991 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.168 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6404d548-94cc-4197-a099-bd9289ba0294 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4a9808fe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3086 identity=53991 ipv4=10.0.0.168 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6404d548-94cc-4197-a099-bd9289ba0294 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4a9808fe1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3086 identity=53991 ipv4=10.0.0.168 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6404d548-94cc-4197-a099-bd9289ba0294 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4a9808fe1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3086 identity=53991 ipv4=10.0.0.168 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6404d548-94cc-4197-a099-bd9289ba0294 subsys=daemon level=info msg="Delete endpoint request" containerID=e3a1720acb endpointID=1033 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5251fc65-6cf6-4c2d-a278-9fc377d77534 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e3a1720acb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1033 identity=53991 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5251fc65-6cf6-4c2d-a278-9fc377d77534 subsys=endpoint level=info msg="Delete endpoint request" containerID=e4a9808fe1 endpointID=3086 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6404d548-94cc-4197-a099-bd9289ba0294 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e4a9808fe1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3086 identity=53991 ipv4=10.0.0.168 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6404d548-94cc-4197-a099-bd9289ba0294 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 28ddb7b6-317f-45dd-9b24-e454c2b571d0 default }" containerID=fdc7e1962b4e1d51e890673b323bec490dc68bdabc92319431ff23716121aa6f datapathConfiguration="&{false false false false false }" interface=lxc3a031a4188fd k8sPodName=monitoring/loki-gateway-748b556d75-7dmjt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdc7e1962b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-7dmjt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 33082a5d-9934-4c00-a580-a41135eebe01 default }" containerID=84d086bab9720ab2bf52689d74a6294c18c5f8dae1181596e5a926499a3a6513 datapathConfiguration="&{false false false false false }" interface=lxc30d739017dd4 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=fdc7e1962b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-7dmjt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=84d086bab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84d086bab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdc7e1962b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identity=29591 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-7dmjt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fdc7e1962b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identity=29591 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-7dmjt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=84d086bab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84d086bab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identity=10949 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84d086bab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identity=10949 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 b49b63b9-2ee5-40ad-863e-02de5b74e8cc default }" containerID=59f7019fdb3984a42ea0b37e85ed4b6502c060a27dd8716d25215ad2d011725d datapathConfiguration="&{false false false false false }" interface=lxcc516d8aa0d05 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59f7019fdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59f7019fdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59f7019fdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identity=32825 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59f7019fdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identity=32825 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=84d086bab9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=641 identity=10949 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=84d086bab9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=641 identity=10949 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fdc7e1962b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=183 identity=29591 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-7dmjt subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdc7e1962b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=183 identity=29591 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-7dmjt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=59f7019fdb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=118 identity=32825 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=59f7019fdb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=118 identity=32825 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.95 3e456665-65e2-4c6f-ae24-16caa9d2546b default }" containerID=7837b986cfe4dd646ced84072d29a9071c9ad887e768809c7bd4c3619736eb78 datapathConfiguration="&{false false false false false }" interface=lxc0b43dbeef0a3 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7837b986cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7837b986cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.31 92d9d93a-4885-434d-ae29-8a98a9e9b866 default }" containerID=164796b666cb39d1e677e9805e76e23f4f9c11a908853efa8bf5383c3cf94ba6 datapathConfiguration="&{false false false false false }" interface=lxc80d48c252822 k8sPodName=local-path-storage/helper-pod-create-pvc-e92656de-c91e-4e38-97bb-03474ecd9c1f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=164796b666 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92656de-c91e-4e38-97bb-03474ecd9c1f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=164796b666 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92656de-c91e-4e38-97bb-03474ecd9c1f subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7837b986cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 identity=11592 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Identity of endpoint changed" containerID=164796b666 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identity=53991 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92656de-c91e-4e38-97bb-03474ecd9c1f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7837b986cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 identity=11592 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=164796b666 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identity=53991 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92656de-c91e-4e38-97bb-03474ecd9c1f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 67cdfabe-1abc-4d63-878d-9d08f7b5d6c1 default }" containerID=574c3770e5111a67dbe35fcd501ca3761b1bc3dd26ac394da6b29b6e51bf4217 datapathConfiguration="&{false false false false false }" interface=lxcf4c61c60a269 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=574c3770e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=574c3770e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=7837b986cf datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2139 identity=11592 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7837b986cf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2139 identity=11592 ipv4=10.0.0.95 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=164796b666 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=47 identity=53991 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92656de-c91e-4e38-97bb-03474ecd9c1f subsys=endpoint level=info msg="Successful endpoint creation" containerID=164796b666 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=47 identity=53991 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92656de-c91e-4e38-97bb-03474ecd9c1f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=574c3770e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=574c3770e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identity=28769 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=574c3770e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identity=28769 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=574c3770e5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=182 identity=28769 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=574c3770e5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=182 identity=28769 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.213 59ad881f-e696-497e-95df-37a09d85fd74 default }" containerID=577960af22480d9a5e8e9cfcb12631341c416aee0c6994edf5b648cb68b5c5fd datapathConfiguration="&{false false false false false }" interface=lxc4c88b7132fcf k8sPodName=monitoring/vector-zdrpv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=577960af22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=898 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/vector-zdrpv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=577960af22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=898 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/vector-zdrpv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=577960af22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=898 identity=25087 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/vector-zdrpv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=577960af22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=898 identity=25087 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/vector-zdrpv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=577960af22 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=898 identity=25087 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/vector-zdrpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=577960af22 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=898 identity=25087 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/vector-zdrpv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=164796b666 endpointID=47 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e92656de-c91e-4e38-97bb-03474ecd9c1f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=164796b666 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=47 identity=53991 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e92656de-c91e-4e38-97bb-03474ecd9c1f subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.6 799ae9e9-6cc3-45d8-90ad-d4c8d89de36e default }" containerID=82779fda0199984d5588c6e798ffe3bbbbb7e48a544c7a188ef2a99bd9666eaa datapathConfiguration="&{false false false false false }" interface=lxc800ad92ec8ca k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82779fda01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3643 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82779fda01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3643 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=82779fda01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3643 identity=23635 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=82779fda01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3643 identity=23635 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=82779fda01 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3643 identity=23635 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=82779fda01 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3643 identity=23635 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.130 da2fcee6-5865-4156-9037-1ba7c900302c default }" containerID=68766c282521b42de9966caf43b7beb08c547604a7e84e6e1bc96a7e7f47b019 datapathConfiguration="&{false false false false false }" interface=lxc0db43b55eca8 k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-njzx9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68766c2825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=978 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-njzx9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68766c2825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=978 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-njzx9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.12.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68766c2825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=978 identity=27581 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-njzx9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68766c2825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=978 identity=27581 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-njzx9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68766c2825 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=978 identity=27581 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-njzx9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=68766c2825 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=978 identity=27581 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-njzx9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.73 cc8ebc7f-22e3-4c53-bba8-8dde8f4807d8 default }" containerID=a7f5a8b66ead725467fc838421ad369a446cc11fa35414c3dcd5802884dba7de datapathConfiguration="&{false false false false false }" interface=lxc0ec4bfbaf9eb k8sPodName=openstack/memcached-memcached-6479589586-g66lx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7f5a8b66e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-g66lx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7f5a8b66e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-g66lx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7f5a8b66e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 identity=19584 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-g66lx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a7f5a8b66e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 identity=19584 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-g66lx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a7f5a8b66e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1321 identity=19584 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-g66lx subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7f5a8b66e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1321 identity=19584 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-g66lx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.49 abb2b2a9-6a74-4e5d-a5c9-6601f6e451c0 default }" containerID=70d2d6fd9ea250d6124df742aae64f929e580e3310d84d3b6f69c19332013fdf datapathConfiguration="&{false false false false false }" interface=lxc99ca476fdc07 k8sPodName=local-path-storage/helper-pod-create-pvc-dc6fb305-713d-4ce5-99a8-936e2fb93d83 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70d2d6fd9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc6fb305-713d-4ce5-99a8-936e2fb93d83 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70d2d6fd9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc6fb305-713d-4ce5-99a8-936e2fb93d83 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70d2d6fd9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 identity=53991 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc6fb305-713d-4ce5-99a8-936e2fb93d83 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70d2d6fd9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 identity=53991 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc6fb305-713d-4ce5-99a8-936e2fb93d83 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=70d2d6fd9e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=623 identity=53991 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc6fb305-713d-4ce5-99a8-936e2fb93d83 subsys=endpoint level=info msg="Successful endpoint creation" containerID=70d2d6fd9e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=623 identity=53991 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc6fb305-713d-4ce5-99a8-936e2fb93d83 subsys=daemon level=info msg="Delete endpoint request" containerID=70d2d6fd9e endpointID=623 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-dc6fb305-713d-4ce5-99a8-936e2fb93d83 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=70d2d6fd9e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=623 identity=53991 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc6fb305-713d-4ce5-99a8-936e2fb93d83 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 9c952d15-b7cc-4dd0-9a6f-210291d4e8b2 default }" containerID=aba8cb7b6899ccba7685a83d8eb44d780782bbf7165fd7c06774ae085ec7c2fa datapathConfiguration="&{false false false false false }" interface=lxcb2890cf728a2 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aba8cb7b68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1249 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aba8cb7b68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1249 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aba8cb7b68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1249 identity=11073 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aba8cb7b68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1249 identity=11073 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aba8cb7b68 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1249 identity=11073 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aba8cb7b68 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1249 identity=11073 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.64 e489a8a0-d7b0-4043-8fc2-cd31332e642f default }" containerID=c84465f9d8af37e0616701fcd5c0eb4ed3f366987c2e2da240bc33dc7e4c418a datapathConfiguration="&{false false false false false }" interface=lxce5c15394a67a k8sPodName=openstack/keystone-api-55ffcb5778-867b5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c84465f9d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-api-55ffcb5778-867b5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c84465f9d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-api-55ffcb5778-867b5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c84465f9d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-api-55ffcb5778-867b5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c84465f9d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identity=31503 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-api-55ffcb5778-867b5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c84465f9d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identity=31503 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-api-55ffcb5778-867b5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 0631fdb7-1f9d-4f40-ab27-7f0d60cddaec default }" containerID=ed4341532d30da3eeabdbdd03402f6f15f8512f383f038f91eb963cf4c84b41b datapathConfiguration="&{false false false false false }" interface=lxc393b887466d3 k8sPodName=openstack/keystone-credential-setup-4zkcw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed4341532d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-credential-setup-4zkcw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed4341532d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2e2c693a-9de5-4cf4-91d6-897b42058087,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=2e2c693a-9de5-4cf4-91d6-897b42058087,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-credential-setup-4zkcw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2e2c693a-9de5-4cf4-91d6-897b42058087;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=2e2c693a-9de5-4cf4-91d6-897b42058087;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed4341532d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identity=14862 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2e2c693a-9de5-4cf4-91d6-897b42058087,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=2e2c693a-9de5-4cf4-91d6-897b42058087,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-credential-setup-4zkcw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed4341532d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identity=14862 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-credential-setup-4zkcw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c84465f9d8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=395 identity=31503 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-api-55ffcb5778-867b5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c84465f9d8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=395 identity=31503 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-api-55ffcb5778-867b5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ed4341532d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=47 identity=14862 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-credential-setup-4zkcw subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed4341532d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=47 identity=14862 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-credential-setup-4zkcw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ed4341532d endpointID=47 k8sNamespace=openstack k8sPodName=keystone-credential-setup-4zkcw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2e2c693a-9de5-4cf4-91d6-897b42058087 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=2e2c693a-9de5-4cf4-91d6-897b42058087 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ed4341532d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=47 identity=14862 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-credential-setup-4zkcw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 c6e8e5c8-03ca-4c13-a91d-e8397b5f802a default }" containerID=df84d1093d2bc71e0a836508d0aad12ed06b2b3fb6f99c6d035f059b4f55fb5c datapathConfiguration="&{false false false false false }" interface=lxc77592cef5387 k8sPodName=openstack/keystone-db-init-sr44b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df84d1093d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-init-sr44b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df84d1093d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3098cf49-82cd-4709-aa96-9b5d4d156376,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=3098cf49-82cd-4709-aa96-9b5d4d156376,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-init-sr44b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=df84d1093d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-init-sr44b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3098cf49-82cd-4709-aa96-9b5d4d156376;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=3098cf49-82cd-4709-aa96-9b5d4d156376;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df84d1093d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identity=4278 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3098cf49-82cd-4709-aa96-9b5d4d156376,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=3098cf49-82cd-4709-aa96-9b5d4d156376,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-init-sr44b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df84d1093d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identity=4278 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-init-sr44b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df84d1093d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=157 identity=4278 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-init-sr44b subsys=endpoint level=info msg="Successful endpoint creation" containerID=df84d1093d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=157 identity=4278 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-init-sr44b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df84d1093d endpointID=157 k8sNamespace=openstack k8sPodName=keystone-db-init-sr44b subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3098cf49-82cd-4709-aa96-9b5d4d156376 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=3098cf49-82cd-4709-aa96-9b5d4d156376 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=df84d1093d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=157 identity=4278 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-db-init-sr44b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 699f4bfe-1c1f-466a-9035-117f4ec919b3 default }" containerID=8b93d1bfa5b16f45d27744fa383c4156f60b8ef4d6f44963c1af2dac65e03bbb datapathConfiguration="&{false false false false false }" interface=lxcd81907f332d1 k8sPodName=openstack/keystone-fernet-setup-l79jx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b93d1bfa5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-l79jx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b93d1bfa5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f2788f8e-773f-4775-bbfe-c0e62b3cfedf,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=f2788f8e-773f-4775-bbfe-c0e62b3cfedf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-l79jx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f2788f8e-773f-4775-bbfe-c0e62b3cfedf;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=f2788f8e-773f-4775-bbfe-c0e62b3cfedf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b93d1bfa5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identity=19734 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f2788f8e-773f-4775-bbfe-c0e62b3cfedf,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=f2788f8e-773f-4775-bbfe-c0e62b3cfedf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-l79jx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b93d1bfa5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identity=19734 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-l79jx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b93d1bfa5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=324 identity=19734 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-l79jx subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b93d1bfa5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=324 identity=19734 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-l79jx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8b93d1bfa5 endpointID=324 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-l79jx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f2788f8e-773f-4775-bbfe-c0e62b3cfedf k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=f2788f8e-773f-4775-bbfe-c0e62b3cfedf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8b93d1bfa5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=324 identity=19734 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-l79jx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 080ca0db-700a-49ca-ab4e-8ee610f398ab default }" containerID=0631e605202f186694767cc9579c947df9481ed8b49556c1d11b1cf60b2ffa3f datapathConfiguration="&{false false false false false }" interface=lxc28a7a19bf6fc k8sPodName=openstack/keystone-db-sync-277lb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0631e60520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-277lb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0631e60520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bdd8e2cd-ef68-4f28-9904-f491e15fb0b4,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=bdd8e2cd-ef68-4f28-9904-f491e15fb0b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-277lb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0631e60520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-277lb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bdd8e2cd-ef68-4f28-9904-f491e15fb0b4;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=bdd8e2cd-ef68-4f28-9904-f491e15fb0b4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0631e60520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=15599 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bdd8e2cd-ef68-4f28-9904-f491e15fb0b4,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=bdd8e2cd-ef68-4f28-9904-f491e15fb0b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-277lb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0631e60520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=15599 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-277lb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0631e60520 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=714 identity=15599 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-277lb subsys=endpoint level=info msg="Successful endpoint creation" containerID=0631e60520 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=714 identity=15599 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-277lb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0631e60520 endpointID=714 k8sNamespace=openstack k8sPodName=keystone-db-sync-277lb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bdd8e2cd-ef68-4f28-9904-f491e15fb0b4 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=bdd8e2cd-ef68-4f28-9904-f491e15fb0b4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0631e60520 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=714 identity=15599 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-sync-277lb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 6205e67c-3a22-4742-b533-4058e2901df9 default }" containerID=43c5a63db51bc98654b523fcea3c1e067962be4274ef0a2367f0919c922dcac6 datapathConfiguration="&{false false false false false }" interface=lxcd05c3c74df0a k8sPodName=openstack/keystone-rabbit-init-5lb5p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43c5a63db5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-rabbit-init-5lb5p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43c5a63db5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=09693cdd-894e-4893-ad6f-537def63ccfa,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=09693cdd-894e-4893-ad6f-537def63ccfa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-rabbit-init-5lb5p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=43c5a63db5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-rabbit-init-5lb5p line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=09693cdd-894e-4893-ad6f-537def63ccfa;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=09693cdd-894e-4893-ad6f-537def63ccfa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43c5a63db5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 identity=3330 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=09693cdd-894e-4893-ad6f-537def63ccfa,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=09693cdd-894e-4893-ad6f-537def63ccfa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-rabbit-init-5lb5p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43c5a63db5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 identity=3330 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-rabbit-init-5lb5p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=43c5a63db5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1528 identity=3330 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-rabbit-init-5lb5p subsys=endpoint level=info msg="Successful endpoint creation" containerID=43c5a63db5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1528 identity=3330 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-rabbit-init-5lb5p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=43c5a63db5 endpointID=1528 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-5lb5p subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=09693cdd-894e-4893-ad6f-537def63ccfa k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=09693cdd-894e-4893-ad6f-537def63ccfa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=43c5a63db5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1528 identity=3330 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-rabbit-init-5lb5p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 162a20ea-7654-478a-8da5-7572c49adfb1 default }" containerID=9f730e0ba9bf9a82f64591085916133dc5e13d9e2d2fb26071feb7a13fcebdd4 datapathConfiguration="&{false false false false false }" interface=lxc11937514e86c k8sPodName=openstack/keystone-domain-manage-r5wjt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f730e0ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-domain-manage-r5wjt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f730e0ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2c8f3f99-073f-4ab8-b1b0-8312a3611225,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=2c8f3f99-073f-4ab8-b1b0-8312a3611225,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-domain-manage-r5wjt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2c8f3f99-073f-4ab8-b1b0-8312a3611225;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=2c8f3f99-073f-4ab8-b1b0-8312a3611225;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f730e0ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identity=17951 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2c8f3f99-073f-4ab8-b1b0-8312a3611225,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=2c8f3f99-073f-4ab8-b1b0-8312a3611225,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-domain-manage-r5wjt oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9f730e0ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identity=17951 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-domain-manage-r5wjt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f730e0ba9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=133 identity=17951 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-domain-manage-r5wjt subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f730e0ba9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=133 identity=17951 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-domain-manage-r5wjt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f730e0ba9 endpointID=133 k8sNamespace=openstack k8sPodName=keystone-domain-manage-r5wjt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2c8f3f99-073f-4ab8-b1b0-8312a3611225 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=2c8f3f99-073f-4ab8-b1b0-8312a3611225 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9f730e0ba9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=133 identity=17951 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-domain-manage-r5wjt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 fa610e8d-7eaf-499a-84a1-3cc457c016bc default }" containerID=80649821d94410b3b03278190e5c9439c2630cb8e4d1fc8136ec928841ce3f85 datapathConfiguration="&{false false false false false }" interface=lxc5b9a936d9176 k8sPodName=openstack/keystone-bootstrap-bxbwt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80649821d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-bootstrap-bxbwt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80649821d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=aa0cabbe-70a3-4ab0-8a61-cf17ff7b1479,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=aa0cabbe-70a3-4ab0-8a61-cf17ff7b1479,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-bootstrap-bxbwt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=aa0cabbe-70a3-4ab0-8a61-cf17ff7b1479;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=aa0cabbe-70a3-4ab0-8a61-cf17ff7b1479;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80649821d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identity=1313 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=aa0cabbe-70a3-4ab0-8a61-cf17ff7b1479,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=aa0cabbe-70a3-4ab0-8a61-cf17ff7b1479,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-bootstrap-bxbwt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80649821d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identity=1313 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-bootstrap-bxbwt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=80649821d9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=772 identity=1313 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-bootstrap-bxbwt subsys=endpoint level=info msg="Successful endpoint creation" containerID=80649821d9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=772 identity=1313 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-bootstrap-bxbwt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=80649821d9 endpointID=772 k8sNamespace=openstack k8sPodName=keystone-bootstrap-bxbwt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=aa0cabbe-70a3-4ab0-8a61-cf17ff7b1479 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=aa0cabbe-70a3-4ab0-8a61-cf17ff7b1479 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=80649821d9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=772 identity=1313 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-bootstrap-bxbwt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 b91f2923-e6fe-45eb-bd68-c7efd9b706cb default }" containerID=3658beeff0b25368e449c13f4887f4dbb8d3aa06ec2c8fcad0693f7b111adcab datapathConfiguration="&{false false false false false }" interface=lxc11caf4ba1b4f k8sPodName=local-path-storage/helper-pod-create-pvc-3cecf94f-e84c-40c5-bbcf-c462b3673aef labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3658beeff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2514 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3cecf94f-e84c-40c5-bbcf-c462b3673aef subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3658beeff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2514 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3cecf94f-e84c-40c5-bbcf-c462b3673aef subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3658beeff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2514 identity=53991 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3cecf94f-e84c-40c5-bbcf-c462b3673aef oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3658beeff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2514 identity=53991 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3cecf94f-e84c-40c5-bbcf-c462b3673aef subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3658beeff0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2514 identity=53991 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3cecf94f-e84c-40c5-bbcf-c462b3673aef subsys=endpoint level=info msg="Successful endpoint creation" containerID=3658beeff0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2514 identity=53991 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3cecf94f-e84c-40c5-bbcf-c462b3673aef subsys=daemon level=info msg="Delete endpoint request" containerID=3658beeff0 endpointID=2514 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3cecf94f-e84c-40c5-bbcf-c462b3673aef subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3658beeff0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2514 identity=53991 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3cecf94f-e84c-40c5-bbcf-c462b3673aef subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 49e36e33-bd22-4fec-a8c0-cfa1b54ea278 default }" containerID=619a61452ec6e15c08fe4ccb9e5ad39e10e6bbdc786cdb310375d4c00d329a2a datapathConfiguration="&{false false false false false }" interface=lxcb88370158671 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=619a61452e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=619a61452e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=619a61452e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=619a61452e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 identity=7895 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=619a61452e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 identity=7895 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=619a61452e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3519 identity=7895 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=619a61452e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3519 identity=7895 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.249 96e99ec0-9efb-4ffe-98a5-b3ebdd04a5fb default }" containerID=0e98470f050e3c2408e58fc6f020228e3f382d310975d768de3c852a81acaee1 datapathConfiguration="&{false false false false false }" interface=lxcd04cfd8d826e k8sPodName=openstack/barbican-api-5db5d87948-8nzcx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e98470f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/barbican-api-5db5d87948-8nzcx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e98470f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/barbican-api-5db5d87948-8nzcx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e98470f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identity=2812 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/barbican-api-5db5d87948-8nzcx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e98470f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identity=2812 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/barbican-api-5db5d87948-8nzcx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 ba45f99d-8d44-45f1-9341-f58c22a71a4d default }" containerID=c1a47f620f18d5b173734fdeffc63381bf2e7fee5378decaf222b554eef716bc datapathConfiguration="&{false false false false false }" interface=lxc2abf5f13aaaf k8sPodName=openstack/barbican-db-init-xcnq7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1a47f620f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2493 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-db-init-xcnq7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1a47f620f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2493 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f6eb3478-8f5b-4376-9a55-1f4bbe7d83c1,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=f6eb3478-8f5b-4376-9a55-1f4bbe7d83c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-db-init-xcnq7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f6eb3478-8f5b-4376-9a55-1f4bbe7d83c1;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=f6eb3478-8f5b-4376-9a55-1f4bbe7d83c1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1a47f620f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2493 identity=33067 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f6eb3478-8f5b-4376-9a55-1f4bbe7d83c1,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=f6eb3478-8f5b-4376-9a55-1f4bbe7d83c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-db-init-xcnq7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1a47f620f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2493 identity=33067 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-db-init-xcnq7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e98470f05 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1604 identity=2812 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/barbican-api-5db5d87948-8nzcx subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e98470f05 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1604 identity=2812 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/barbican-api-5db5d87948-8nzcx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c1a47f620f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2493 identity=33067 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-db-init-xcnq7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1a47f620f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2493 identity=33067 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-db-init-xcnq7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c1a47f620f endpointID=2493 k8sNamespace=openstack k8sPodName=barbican-db-init-xcnq7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f6eb3478-8f5b-4376-9a55-1f4bbe7d83c1 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=f6eb3478-8f5b-4376-9a55-1f4bbe7d83c1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c1a47f620f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2493 identity=33067 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-db-init-xcnq7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 4196f1c8-5ee7-4da2-a0f4-961e26d8d084 default }" containerID=0f9475b6fd2f0ca29bf491289463fba9f73b06eb5d6418171b821e3becc2b967 datapathConfiguration="&{false false false false false }" interface=lxced1975435060 k8sPodName=openstack/barbican-db-sync-8gqcx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f9475b6fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1894 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-db-sync-8gqcx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f9475b6fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1894 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1b56a61e-da53-4a3a-aa92-a5b6d6f2f48b,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=1b56a61e-da53-4a3a-aa92-a5b6d6f2f48b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-db-sync-8gqcx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1b56a61e-da53-4a3a-aa92-a5b6d6f2f48b;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=1b56a61e-da53-4a3a-aa92-a5b6d6f2f48b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f9475b6fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1894 identity=7372 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1b56a61e-da53-4a3a-aa92-a5b6d6f2f48b,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=1b56a61e-da53-4a3a-aa92-a5b6d6f2f48b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-db-sync-8gqcx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f9475b6fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1894 identity=7372 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-db-sync-8gqcx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f9475b6fd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1894 identity=7372 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-db-sync-8gqcx subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f9475b6fd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1894 identity=7372 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-db-sync-8gqcx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0f9475b6fd endpointID=1894 k8sNamespace=openstack k8sPodName=barbican-db-sync-8gqcx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1b56a61e-da53-4a3a-aa92-a5b6d6f2f48b k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=1b56a61e-da53-4a3a-aa92-a5b6d6f2f48b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0f9475b6fd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1894 identity=7372 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-db-sync-8gqcx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 e2d4609a-6644-4f53-a99c-c84740cbcdd4 default }" containerID=ab41559767f1a235ad389509be5221a8c5aaa8f53c2ee4612dc264dcbc733003 datapathConfiguration="&{false false false false false }" interface=lxc1107cca428b4 k8sPodName=openstack/barbican-rabbit-init-9hlq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab41559767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1967 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-rabbit-init-9hlq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab41559767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1967 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ebb90c4f-619f-42ed-8ccc-5fd1d995a3e4,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ebb90c4f-619f-42ed-8ccc-5fd1d995a3e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-rabbit-init-9hlq5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ab41559767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1967 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-rabbit-init-9hlq5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ebb90c4f-619f-42ed-8ccc-5fd1d995a3e4;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ebb90c4f-619f-42ed-8ccc-5fd1d995a3e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab41559767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1967 identity=6325 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ebb90c4f-619f-42ed-8ccc-5fd1d995a3e4,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ebb90c4f-619f-42ed-8ccc-5fd1d995a3e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-rabbit-init-9hlq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab41559767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1967 identity=6325 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-rabbit-init-9hlq5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab41559767 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1967 identity=6325 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-rabbit-init-9hlq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab41559767 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1967 identity=6325 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-rabbit-init-9hlq5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ab41559767 endpointID=1967 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-9hlq5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ebb90c4f-619f-42ed-8ccc-5fd1d995a3e4 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ebb90c4f-619f-42ed-8ccc-5fd1d995a3e4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ab41559767 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1967 identity=6325 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-rabbit-init-9hlq5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 ee77e227-5724-4c6e-a782-b9b8edf2dc7d default }" containerID=36c9212081cce4fc2de441f55adb85849e3ad975a9a754943235d08697ab3032 datapathConfiguration="&{false false false false false }" interface=lxc9bc7f50c6582 k8sPodName=openstack/barbican-ks-service-8p2tm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36c9212081 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-ks-service-8p2tm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36c9212081 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=689ccca6-b188-467e-8186-1ff821933774,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=689ccca6-b188-467e-8186-1ff821933774,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-ks-service-8p2tm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=689ccca6-b188-467e-8186-1ff821933774;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=689ccca6-b188-467e-8186-1ff821933774;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36c9212081 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 identity=5373 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=689ccca6-b188-467e-8186-1ff821933774,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=689ccca6-b188-467e-8186-1ff821933774,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-ks-service-8p2tm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=36c9212081 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 identity=5373 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-ks-service-8p2tm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36c9212081 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=628 identity=5373 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-ks-service-8p2tm subsys=endpoint level=info msg="Successful endpoint creation" containerID=36c9212081 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=628 identity=5373 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-ks-service-8p2tm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=36c9212081 endpointID=628 k8sNamespace=openstack k8sPodName=barbican-ks-service-8p2tm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=689ccca6-b188-467e-8186-1ff821933774 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=689ccca6-b188-467e-8186-1ff821933774 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=36c9212081 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=628 identity=5373 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/barbican-ks-service-8p2tm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 b68f8e80-7907-4ba0-a214-d74bba3af3f0 default }" containerID=c2c59173ace95bbce3426bb5f9f4214ca6983dfba91d7b31b29fac3c53421e33 datapathConfiguration="&{false false false false false }" interface=lxcb8fd0c790f1c k8sPodName=openstack/barbican-ks-endpoints-qwgvt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2c59173ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3208 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qwgvt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2c59173ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3208 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=58dbe6f6-f0a2-4ee7-a245-cf88208977a2,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=58dbe6f6-f0a2-4ee7-a245-cf88208977a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qwgvt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=58dbe6f6-f0a2-4ee7-a245-cf88208977a2;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=58dbe6f6-f0a2-4ee7-a245-cf88208977a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2c59173ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3208 identity=2895 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=58dbe6f6-f0a2-4ee7-a245-cf88208977a2,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=58dbe6f6-f0a2-4ee7-a245-cf88208977a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qwgvt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2c59173ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3208 identity=2895 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qwgvt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c2c59173ac datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3208 identity=2895 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qwgvt subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2c59173ac datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3208 identity=2895 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qwgvt subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03573795771504322 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=c2c59173ac endpointID=3208 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-qwgvt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=58dbe6f6-f0a2-4ee7-a245-cf88208977a2 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=58dbe6f6-f0a2-4ee7-a245-cf88208977a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c2c59173ac datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3208 identity=2895 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qwgvt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 9082c860-dbb1-47eb-a309-d1153b0677bb default }" containerID=63440126ad5a02c21eccca1c3f3580dc2a6f8a9626fb09ed2dfbb04bf8402625 datapathConfiguration="&{false false false false false }" interface=lxc482d1c618e25 k8sPodName=openstack/barbican-ks-user-bgsnr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63440126ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-bgsnr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63440126ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a7c6112e-eabf-49c0-a7d0-afc0b8e4146d,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=a7c6112e-eabf-49c0-a7d0-afc0b8e4146d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-bgsnr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a7c6112e-eabf-49c0-a7d0-afc0b8e4146d;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=a7c6112e-eabf-49c0-a7d0-afc0b8e4146d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63440126ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 identity=1506 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a7c6112e-eabf-49c0-a7d0-afc0b8e4146d,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=a7c6112e-eabf-49c0-a7d0-afc0b8e4146d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-bgsnr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63440126ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 identity=1506 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-bgsnr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63440126ad datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2825 identity=1506 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-bgsnr subsys=endpoint level=info msg="Successful endpoint creation" containerID=63440126ad datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2825 identity=1506 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-bgsnr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=63440126ad endpointID=2825 k8sNamespace=openstack k8sPodName=barbican-ks-user-bgsnr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a7c6112e-eabf-49c0-a7d0-afc0b8e4146d k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=a7c6112e-eabf-49c0-a7d0-afc0b8e4146d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=63440126ad datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2825 identity=1506 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-bgsnr subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.233 40470009-5c44-4833-bdf0-04083e13dc41 default }" containerID=b9fe4c81a951381d0727809972bc35941ed045a6ef1d916e9c5433dba74e9406 datapathConfiguration="&{false false false false false }" interface=lxca5577afb0a10 k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-kgd2g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9fe4c81a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 ipv4=10.0.0.233 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-kgd2g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9fe4c81a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.233 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-kgd2g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b9fe4c81a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.233 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-kgd2g line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b9fe4c81a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identity=4130 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.233 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-kgd2g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9fe4c81a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identity=4130 ipv4=10.0.0.233 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-kgd2g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b9fe4c81a9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=373 identity=4130 ipv4=10.0.0.233 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-kgd2g subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9fe4c81a9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=373 identity=4130 ipv4=10.0.0.233 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-kgd2g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.125 b37dadb4-8982-46af-bcc6-8813241c58df default }" containerID=d7691e4a69e0673c97e70ff18781894b0c495c3a6be598852967770a8169af5e datapathConfiguration="&{false false false false false }" interface=lxc0d2b5a2eb449 k8sPodName=openstack/rook-ceph-detect-version-m5ptz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7691e4a69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rook-ceph-detect-version-m5ptz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7691e4a69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=8e874722-8224-41f0-8695-7783a3066a79,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=8e874722-8224-41f0-8695-7783a3066a79,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rook-ceph-detect-version-m5ptz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=8e874722-8224-41f0-8695-7783a3066a79;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=8e874722-8224-41f0-8695-7783a3066a79;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7691e4a69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 identity=53677 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=8e874722-8224-41f0-8695-7783a3066a79,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=8e874722-8224-41f0-8695-7783a3066a79,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rook-ceph-detect-version-m5ptz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7691e4a69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 identity=53677 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rook-ceph-detect-version-m5ptz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d7691e4a69 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3253 identity=53677 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rook-ceph-detect-version-m5ptz subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7691e4a69 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3253 identity=53677 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rook-ceph-detect-version-m5ptz subsys=daemon level=info msg="Delete endpoint request" containerID=d7691e4a69 endpointID=3253 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-m5ptz subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=8e874722-8224-41f0-8695-7783a3066a79 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=8e874722-8224-41f0-8695-7783a3066a79 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=d7691e4a69 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3253 identity=53677 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rook-ceph-detect-version-m5ptz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 66ed1452-01dd-421d-8cec-f2fddbf72918 default }" containerID=0e91961565aafc84b6c28d431ffff7921e35798e574f1d285f44de3da87392d5 datapathConfiguration="&{false false false false false }" interface=lxc91aff6ae379b k8sPodName=local-path-storage/helper-pod-create-pvc-60dbf367-0127-404f-af1d-f9359d8b81a6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e91961565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3738 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60dbf367-0127-404f-af1d-f9359d8b81a6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e91961565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3738 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60dbf367-0127-404f-af1d-f9359d8b81a6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e91961565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3738 identity=53991 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60dbf367-0127-404f-af1d-f9359d8b81a6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e91961565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3738 identity=53991 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60dbf367-0127-404f-af1d-f9359d8b81a6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e91961565 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3738 identity=53991 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60dbf367-0127-404f-af1d-f9359d8b81a6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e91961565 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3738 identity=53991 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60dbf367-0127-404f-af1d-f9359d8b81a6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.241 c5fbd031-8f88-4b69-a42c-9c9d6357cfa3 default }" containerID=ab9261f1f52d11c4c279deb6b86eb27b7f234435cf5b23eef89d48045c095c1f datapathConfiguration="&{false false false false false }" interface=lxc8a1e03395c61 k8sPodName=openstack/ceph-object-controller-detect-version-m6gd4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab9261f1f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-m6gd4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab9261f1f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=1406867c-e618-454c-b293-a2b745d3f36c,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=1406867c-e618-454c-b293-a2b745d3f36c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-m6gd4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=1406867c-e618-454c-b293-a2b745d3f36c;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=1406867c-e618-454c-b293-a2b745d3f36c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab9261f1f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=49216 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=1406867c-e618-454c-b293-a2b745d3f36c,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=1406867c-e618-454c-b293-a2b745d3f36c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-m6gd4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab9261f1f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=49216 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-m6gd4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ab9261f1f5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=168 identity=49216 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-m6gd4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab9261f1f5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=168 identity=49216 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-m6gd4 subsys=daemon level=info msg="Delete endpoint request" containerID=0e91961565 endpointID=3738 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-60dbf367-0127-404f-af1d-f9359d8b81a6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0e91961565 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3738 identity=53991 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60dbf367-0127-404f-af1d-f9359d8b81a6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ab9261f1f5 endpointID=168 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-m6gd4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=1406867c-e618-454c-b293-a2b745d3f36c k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=1406867c-e618-454c-b293-a2b745d3f36c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=ab9261f1f5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=168 identity=49216 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-m6gd4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 9b8adc9a-0c30-4cc4-9a4c-a8f4319644b2 default }" containerID=dad714e141a969f14013810a95b28ce4d19a62fa8addf16b8034055ae1963427 datapathConfiguration="&{false false false false false }" interface=lxc7ecedf4f530d k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dad714e141 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2834 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dad714e141 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2834 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dad714e141 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2834 identity=4167 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dad714e141 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2834 identity=4167 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dad714e141 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2834 identity=4167 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dad714e141 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2834 identity=4167 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.125 d0a2dae8-f62e-4a36-ab4a-4f85d22cca37 default }" containerID=7f1b9cd1d5b1a68f1d68c7ccde5a0468717a5cd465446b7ef0de31a1089fbbdf datapathConfiguration="&{false false false false false }" interface=lxca3af1cd15672 k8sPodName=openstack/glance-db-init-r4gkf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f1b9cd1d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3994 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-db-init-r4gkf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f1b9cd1d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3994 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9d2473b7-f5bb-4661-ab9b-6657ababc144,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=9d2473b7-f5bb-4661-ab9b-6657ababc144,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-db-init-r4gkf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9d2473b7-f5bb-4661-ab9b-6657ababc144;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=9d2473b7-f5bb-4661-ab9b-6657ababc144;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=7f1b9cd1d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3994 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-db-init-r4gkf line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7f1b9cd1d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3994 identity=41599 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9d2473b7-f5bb-4661-ab9b-6657ababc144,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=9d2473b7-f5bb-4661-ab9b-6657ababc144,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-db-init-r4gkf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f1b9cd1d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3994 identity=41599 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-db-init-r4gkf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f1b9cd1d5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3994 identity=41599 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-db-init-r4gkf subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f1b9cd1d5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3994 identity=41599 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-db-init-r4gkf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7f1b9cd1d5 endpointID=3994 k8sNamespace=openstack k8sPodName=glance-db-init-r4gkf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9d2473b7-f5bb-4661-ab9b-6657ababc144 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=9d2473b7-f5bb-4661-ab9b-6657ababc144 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7f1b9cd1d5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3994 identity=41599 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-db-init-r4gkf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 79517db3-cae1-4b01-a729-bcc8318fd2d2 default }" containerID=cb2c20118e4c6ffc796113e5370dfbf0999c3687a521d2c53d2609d448bd517d datapathConfiguration="&{false false false false false }" interface=lxc401bddd6b1fc k8sPodName=openstack/glance-db-sync-xxx6v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb2c20118e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3267 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-db-sync-xxx6v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb2c20118e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3267 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a825034b-3070-484b-a15d-254cadb02a08,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=a825034b-3070-484b-a15d-254cadb02a08,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-db-sync-xxx6v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a825034b-3070-484b-a15d-254cadb02a08;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=a825034b-3070-484b-a15d-254cadb02a08;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb2c20118e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3267 identity=34328 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a825034b-3070-484b-a15d-254cadb02a08,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=a825034b-3070-484b-a15d-254cadb02a08,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-db-sync-xxx6v oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cb2c20118e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3267 identity=34328 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-db-sync-xxx6v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb2c20118e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3267 identity=34328 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-db-sync-xxx6v subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb2c20118e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3267 identity=34328 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-db-sync-xxx6v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cb2c20118e endpointID=3267 k8sNamespace=openstack k8sPodName=glance-db-sync-xxx6v subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a825034b-3070-484b-a15d-254cadb02a08 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=a825034b-3070-484b-a15d-254cadb02a08 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=cb2c20118e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3267 identity=34328 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-db-sync-xxx6v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 8cc70e49-71a8-4a60-a521-3de34ad5dde1 default }" containerID=f926938c06a80d907fc38dc2db17f251a041e259652114dee0ef756be20e2351 datapathConfiguration="&{false false false false false }" interface=lxcd36936f393b4 k8sPodName=openstack/glance-rabbit-init-rczqm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f926938c06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-rabbit-init-rczqm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f926938c06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a4c65bb9-8dc4-4d14-895f-1eccebd96746,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a4c65bb9-8dc4-4d14-895f-1eccebd96746,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-rabbit-init-rczqm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a4c65bb9-8dc4-4d14-895f-1eccebd96746;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a4c65bb9-8dc4-4d14-895f-1eccebd96746;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f926938c06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 identity=64954 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a4c65bb9-8dc4-4d14-895f-1eccebd96746,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a4c65bb9-8dc4-4d14-895f-1eccebd96746,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-rabbit-init-rczqm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f926938c06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 identity=64954 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-rabbit-init-rczqm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f926938c06 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=173 identity=64954 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-rabbit-init-rczqm subsys=endpoint level=info msg="Successful endpoint creation" containerID=f926938c06 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=173 identity=64954 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-rabbit-init-rczqm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f926938c06 endpointID=173 k8sNamespace=openstack k8sPodName=glance-rabbit-init-rczqm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a4c65bb9-8dc4-4d14-895f-1eccebd96746 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a4c65bb9-8dc4-4d14-895f-1eccebd96746 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f926938c06 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=173 identity=64954 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-rabbit-init-rczqm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 9f2deb20-bd94-4419-9cfe-55f30e527461 default }" containerID=e9cdd785cc9f13c76b2ea1a797f3e85219152e48676a04833cda891fcc30bb00 datapathConfiguration="&{false false false false false }" interface=lxc8805334abb6b k8sPodName=openstack/glance-ks-service-r4czd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9cdd785cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-ks-service-r4czd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9cdd785cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c1bd1b0e-8f13-467e-95c3-83dec5823ae4,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=c1bd1b0e-8f13-467e-95c3-83dec5823ae4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-ks-service-r4czd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c1bd1b0e-8f13-467e-95c3-83dec5823ae4;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=c1bd1b0e-8f13-467e-95c3-83dec5823ae4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9cdd785cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identity=4460 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c1bd1b0e-8f13-467e-95c3-83dec5823ae4,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=c1bd1b0e-8f13-467e-95c3-83dec5823ae4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-ks-service-r4czd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9cdd785cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=452 identity=4460 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-ks-service-r4czd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9cdd785cc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=452 identity=4460 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-ks-service-r4czd subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9cdd785cc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=452 identity=4460 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-ks-service-r4czd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.253 edf9fb58-82f2-46c8-9d27-826b3813429b default }" containerID=3bbd2a8771591a487361facb5df7983b5936e04328b18fd2016e6571608085c9 datapathConfiguration="&{false false false false false }" interface=lxc0244dc00cada k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-6pm5n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bbd2a8771 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3240 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-6pm5n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bbd2a8771 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3240 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-6pm5n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bbd2a8771 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3240 identity=30703 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-6pm5n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bbd2a8771 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3240 identity=30703 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-6pm5n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 09ef93b9-d938-422f-b0ce-3badaab133e7 default }" containerID=4d7597bdddc446cefdae6604accde76ccd4e8de532b4ce3a78707951aa99a122 datapathConfiguration="&{false false false false false }" interface=lxca0ad7b8febe1 k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-s59sj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d7597bddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-s59sj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d7597bddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-s59sj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d7597bddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 identity=65519 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-s59sj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d7597bddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1125 identity=65519 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-s59sj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3bbd2a8771 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3240 identity=30703 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-6pm5n subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bbd2a8771 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3240 identity=30703 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-6pm5n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4d7597bddd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1125 identity=65519 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-s59sj subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d7597bddd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1125 identity=65519 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-s59sj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e9cdd785cc endpointID=452 k8sNamespace=openstack k8sPodName=glance-ks-service-r4czd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c1bd1b0e-8f13-467e-95c3-83dec5823ae4 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=c1bd1b0e-8f13-467e-95c3-83dec5823ae4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e9cdd785cc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=452 identity=4460 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-ks-service-r4czd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 516050fc-3e64-409a-ba7e-91363a51ef9a default }" containerID=cd74c4369c226cca9e0d92cc3116d9d70e11ba4450bc1b1f559b6653226ef009 datapathConfiguration="&{false false false false false }" interface=lxc8222d2119692 k8sPodName=openstack/glance-ks-endpoints-l2qj8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd74c4369c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3895 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-ks-endpoints-l2qj8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd74c4369c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3895 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3dc1a2a1-8c4a-4cba-874f-d51e5d4c9495,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3dc1a2a1-8c4a-4cba-874f-d51e5d4c9495,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-ks-endpoints-l2qj8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3dc1a2a1-8c4a-4cba-874f-d51e5d4c9495;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3dc1a2a1-8c4a-4cba-874f-d51e5d4c9495;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd74c4369c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3895 identity=6263 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3dc1a2a1-8c4a-4cba-874f-d51e5d4c9495,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3dc1a2a1-8c4a-4cba-874f-d51e5d4c9495,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-ks-endpoints-l2qj8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd74c4369c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3895 identity=6263 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-ks-endpoints-l2qj8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cd74c4369c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3895 identity=6263 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-ks-endpoints-l2qj8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd74c4369c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3895 identity=6263 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-ks-endpoints-l2qj8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cd74c4369c endpointID=3895 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-l2qj8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3dc1a2a1-8c4a-4cba-874f-d51e5d4c9495 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3dc1a2a1-8c4a-4cba-874f-d51e5d4c9495 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=cd74c4369c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3895 identity=6263 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-ks-endpoints-l2qj8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 fdc31ded-ca48-4b23-8417-086f512087d9 default }" containerID=fe8f30807df9d7e4ed6872d98f9c3a4226b8484e37f1bb689018228667d2ecd0 datapathConfiguration="&{false false false false false }" interface=lxc86d5264119ff k8sPodName=openstack/ceph-object-controller-detect-version-6rlwj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe8f30807d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rlwj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe8f30807d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=e087cfbe-720d-46c9-aaaa-80c0be4da90c,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=e087cfbe-720d-46c9-aaaa-80c0be4da90c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rlwj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=e087cfbe-720d-46c9-aaaa-80c0be4da90c;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=e087cfbe-720d-46c9-aaaa-80c0be4da90c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=fe8f30807d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 identity=33645 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=e087cfbe-720d-46c9-aaaa-80c0be4da90c,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=e087cfbe-720d-46c9-aaaa-80c0be4da90c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rlwj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe8f30807d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 identity=33645 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rlwj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe8f30807d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=955 identity=33645 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rlwj subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe8f30807d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=955 identity=33645 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rlwj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.93 b5b349de-9c85-428d-bfbd-c95aba073f82 default }" containerID=cc18a6ff99c9d760da6460e8d9af0cddb56187a1abf27b37f03d65c83443c3b3 datapathConfiguration="&{false false false false false }" interface=lxccba199a3c9b6 k8sPodName=openstack/glance-ks-user-tnlw8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc18a6ff99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2371 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-ks-user-tnlw8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc18a6ff99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2371 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f5a68798-48af-4161-b120-1a4d7d17e28a,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f5a68798-48af-4161-b120-1a4d7d17e28a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-ks-user-tnlw8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f5a68798-48af-4161-b120-1a4d7d17e28a;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=f5a68798-48af-4161-b120-1a4d7d17e28a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc18a6ff99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2371 identity=63664 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f5a68798-48af-4161-b120-1a4d7d17e28a,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f5a68798-48af-4161-b120-1a4d7d17e28a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-ks-user-tnlw8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc18a6ff99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2371 identity=63664 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-ks-user-tnlw8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc18a6ff99 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2371 identity=63664 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-ks-user-tnlw8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc18a6ff99 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2371 identity=63664 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-ks-user-tnlw8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fe8f30807d endpointID=955 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-6rlwj subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=e087cfbe-720d-46c9-aaaa-80c0be4da90c k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=e087cfbe-720d-46c9-aaaa-80c0be4da90c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=fe8f30807d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=955 identity=33645 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6rlwj subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cc18a6ff99 endpointID=2371 k8sNamespace=openstack k8sPodName=glance-ks-user-tnlw8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f5a68798-48af-4161-b120-1a4d7d17e28a k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=f5a68798-48af-4161-b120-1a4d7d17e28a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=cc18a6ff99 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2371 identity=63664 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-ks-user-tnlw8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 c124d76d-0b1c-4ad4-8697-fd3105a0c6e0 default }" containerID=4ceaa6f1d1cef41b7576364e4a972e1d46354126f6b4f1cf91e667d64e9e4b0e datapathConfiguration="&{false false false false false }" interface=lxcac32873013c5 k8sPodName=openstack/glance-metadefs-load-pzwvd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ceaa6f1d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-metadefs-load-pzwvd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ceaa6f1d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bc479afc-c052-486d-bef2-1c24501059e7,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=bc479afc-c052-486d-bef2-1c24501059e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-metadefs-load-pzwvd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bc479afc-c052-486d-bef2-1c24501059e7;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=bc479afc-c052-486d-bef2-1c24501059e7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ceaa6f1d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=29955 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bc479afc-c052-486d-bef2-1c24501059e7,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=bc479afc-c052-486d-bef2-1c24501059e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-metadefs-load-pzwvd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ceaa6f1d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=29955 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-metadefs-load-pzwvd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4ceaa6f1d1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1068 identity=29955 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-metadefs-load-pzwvd subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ceaa6f1d1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1068 identity=29955 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-metadefs-load-pzwvd subsys=daemon level=info msg="Delete endpoint request" containerID=4ceaa6f1d1 endpointID=1068 k8sNamespace=openstack k8sPodName=glance-metadefs-load-pzwvd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bc479afc-c052-486d-bef2-1c24501059e7 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=bc479afc-c052-486d-bef2-1c24501059e7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4ceaa6f1d1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1068 identity=29955 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-metadefs-load-pzwvd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 d2d586bd-16dd-42f7-b18d-6457bd1116b9 default }" containerID=b7e81b9ebb8aa25bbb37e8ee052318540f745066ebfed3f10b312849c34a178c datapathConfiguration="&{false false false false false }" interface=lxc401337b9d0c6 k8sPodName=openstack/glance-storage-init-wpk8z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7e81b9ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-wpk8z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7e81b9ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e6ed862e-bf93-48ff-99bc-823d4e746429,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=e6ed862e-bf93-48ff-99bc-823d4e746429,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-wpk8z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e6ed862e-bf93-48ff-99bc-823d4e746429;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=e6ed862e-bf93-48ff-99bc-823d4e746429;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7e81b9ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identity=1508 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e6ed862e-bf93-48ff-99bc-823d4e746429,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=e6ed862e-bf93-48ff-99bc-823d4e746429,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-wpk8z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7e81b9ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identity=1508 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-wpk8z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b7e81b9ebb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3090 identity=1508 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-wpk8z subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7e81b9ebb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3090 identity=1508 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-wpk8z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b7e81b9ebb endpointID=3090 k8sNamespace=openstack k8sPodName=glance-storage-init-wpk8z subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e6ed862e-bf93-48ff-99bc-823d4e746429 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=e6ed862e-bf93-48ff-99bc-823d4e746429 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b7e81b9ebb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3090 identity=1508 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-wpk8z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 2632749d-bd10-433f-9acf-dec342db260e default }" containerID=3c5b81c608c6ceca41e173912ce58dffc0fea198f2d9c74f851511038bc8e0a5 datapathConfiguration="&{false false false false false }" interface=lxc40bb697546ed k8sPodName=openstack/glance-api-7b59849975-5rhv6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c5b81c608 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/glance-api-7b59849975-5rhv6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c5b81c608 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/glance-api-7b59849975-5rhv6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c5b81c608 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 identity=5367 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/glance-api-7b59849975-5rhv6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c5b81c608 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 identity=5367 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/glance-api-7b59849975-5rhv6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3c5b81c608 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1055 identity=5367 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/glance-api-7b59849975-5rhv6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c5b81c608 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1055 identity=5367 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/glance-api-7b59849975-5rhv6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.227 9673bd46-f567-4a9d-b818-a073e303e401 default }" containerID=4f18eff583b3f1327bf14a431635d4c6cafcceb11889d622a6b03aa441cd0a92 datapathConfiguration="&{false false false false false }" interface=lxc2362406879ec k8sPodName=openstack/staffeln-api-66c7cbfb6b-m78w4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f18eff583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-api-66c7cbfb6b-m78w4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f18eff583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-api-66c7cbfb6b-m78w4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f18eff583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identity=13028 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-api-66c7cbfb6b-m78w4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f18eff583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identity=13028 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-api-66c7cbfb6b-m78w4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.59 9dd9b8d1-82bc-44e7-96b1-13c68a3f9ce3 default }" containerID=40f4119bfecc24f18e1ee6ea2d4e9d551c820711dceaf57d76f256de75400859 datapathConfiguration="&{false false false false false }" interface=lxcf483c759c5db k8sPodName=openstack/staffeln-conductor-58f88958df-75dh8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40f4119bfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-conductor-58f88958df-75dh8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40f4119bfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-conductor-58f88958df-75dh8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40f4119bfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 identity=15579 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-conductor-58f88958df-75dh8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40f4119bfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 identity=15579 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-conductor-58f88958df-75dh8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f18eff583 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=202 identity=13028 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-api-66c7cbfb6b-m78w4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f18eff583 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=202 identity=13028 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-api-66c7cbfb6b-m78w4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.46 3eaf28ae-e207-403b-aca9-7963550f804e default }" containerID=2b3568ffe43b7f694953dc74f2b16ac8b8395039d3287042aaa32d25a93175a6 datapathConfiguration="&{false false false false false }" interface=lxce8d97e361a60 k8sPodName=openstack/staffeln-db-init-k57lx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b3568ffe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2552 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-db-init-k57lx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b3568ffe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2552 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5e5dd8ec-c494-4b92-89e4-77410b205fca,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=5e5dd8ec-c494-4b92-89e4-77410b205fca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-db-init-k57lx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=5e5dd8ec-c494-4b92-89e4-77410b205fca;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=5e5dd8ec-c494-4b92-89e4-77410b205fca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b3568ffe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2552 identity=52406 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5e5dd8ec-c494-4b92-89e4-77410b205fca,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=5e5dd8ec-c494-4b92-89e4-77410b205fca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-db-init-k57lx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b3568ffe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2552 identity=52406 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-db-init-k57lx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40f4119bfe datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2296 identity=15579 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-conductor-58f88958df-75dh8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=40f4119bfe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2296 identity=15579 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-conductor-58f88958df-75dh8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2b3568ffe4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2552 identity=52406 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-db-init-k57lx subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b3568ffe4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2552 identity=52406 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-db-init-k57lx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2b3568ffe4 endpointID=2552 k8sNamespace=openstack k8sPodName=staffeln-db-init-k57lx subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=5e5dd8ec-c494-4b92-89e4-77410b205fca k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=5e5dd8ec-c494-4b92-89e4-77410b205fca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=2b3568ffe4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2552 identity=52406 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-db-init-k57lx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 ada6e0af-0ddb-4ce6-a779-7b020da514b6 default }" containerID=a798c374f351e782ffc904c2486ba8bbb9bfb1740346e53c6c9f3f58efcc42a2 datapathConfiguration="&{false false false false false }" interface=lxcf42b0fa75ec3 k8sPodName=openstack/staffeln-db-sync-whrg9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a798c374f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1187 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/staffeln-db-sync-whrg9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a798c374f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1187 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d7ae9ff0-3357-4a81-b119-6b45ffb535e3,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=d7ae9ff0-3357-4a81-b119-6b45ffb535e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/staffeln-db-sync-whrg9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a798c374f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1187 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.116 ipv6= k8sPodName=openstack/staffeln-db-sync-whrg9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=d7ae9ff0-3357-4a81-b119-6b45ffb535e3;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=d7ae9ff0-3357-4a81-b119-6b45ffb535e3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a798c374f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1187 identity=19559 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d7ae9ff0-3357-4a81-b119-6b45ffb535e3,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=d7ae9ff0-3357-4a81-b119-6b45ffb535e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/staffeln-db-sync-whrg9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a798c374f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1187 identity=19559 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/staffeln-db-sync-whrg9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a798c374f3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1187 identity=19559 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/staffeln-db-sync-whrg9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a798c374f3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1187 identity=19559 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/staffeln-db-sync-whrg9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager