level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.21461ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="47.552µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="987.464µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.97µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=100.85884ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.431µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="18.64µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="68.932µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="68.392µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="71.132µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="387.38µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.82µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.974349ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=10.562268ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="67.882µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="33.171µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="157.473µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="96.902µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="61.701µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=44.887789ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="99.952µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.76µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="8.011µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.246.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.272623ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="5.081µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.440349ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="10.81µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.790618ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="12.69µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="42.412µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.76µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.32µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="13.85µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="53.911µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="19.99µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="134.353µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="471.722µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.51µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="12.79µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="343.988µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="956.673µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.775204ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="8.161µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="30.951µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.246 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.246 ipAddr.ipv6="" k8sNodeIP=199.204.45.246 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.246" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.60" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.246" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.246} {CiliumInternalIP 10.0.0.60}] 10.0.0.0/24 [] [] 10.0.0.56 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:37981" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.640371307s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="23.301µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="12.46µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="66.222µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="30.661µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3656 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3656 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3656 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.590708482s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=309.593143ms file-path=/var/run/cilium/state/templates/8768cfd8de7a1c02aff8784fb7cab2fd1f30db826813a2a85ed370e65dd2e921/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3656 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 ipv4=10.0.0.56 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identityLabels="reserved:health" ipv4=10.0.0.56 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identity=4 identityLabels="reserved:health" ipv4=10.0.0.56 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 ce53baf3-f06a-4da4-9f1f-247ce5c49c70 default }" containerID=6b15c095b35b4cf96d382e23c7b22d661796884dbfe1932867ddc7022602fe42 datapathConfiguration="&{false false false false false }" interface=lxc0ee57a1b1415 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5lxbf labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.128 b99adb19-a6c9-4647-9d64-fa069c0ef4d2 default }" containerID=0ec3a3cccca280564428ace82aae19b5a5f952c8e19f198dc4d735b2ca597012 datapathConfiguration="&{false false false false false }" interface=lxc052af06f51f2 k8sPodName=kube-system/coredns-7c96b6546b-gpncw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b15c095b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1896 ipv4=10.0.0.18 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5lxbf subsys=endpoint level=info msg="New endpoint" containerID=0ec3a3cccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=942 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gpncw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b15c095b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1896 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=ff10743b-e3df-441f-b6be-edb355953af0,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=ff10743b-e3df-441f-b6be-edb355953af0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.18 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5lxbf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ec3a3cccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=942 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gpncw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=ff10743b-e3df-441f-b6be-edb355953af0;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=ff10743b-e3df-441f-b6be-edb355953af0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b15c095b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1896 identity=10307 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=ff10743b-e3df-441f-b6be-edb355953af0,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=ff10743b-e3df-441f-b6be-edb355953af0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.18 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5lxbf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6b15c095b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1896 identity=10307 ipv4=10.0.0.18 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5lxbf subsys=endpoint level=info msg="Invalid state transition skipped" containerID=0ec3a3cccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=942 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gpncw line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ec3a3cccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=942 identity=14373 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gpncw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ec3a3cccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=942 identity=14373 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gpncw subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.048136671s file-path=/var/run/cilium/state/templates/125e982712d6169ba10a0cd19e1395c32d3d4278aca3467c2efa6396780e1c7b/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=0ec3a3cccc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=942 identity=14373 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gpncw subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ec3a3cccc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=942 identity=14373 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gpncw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6b15c095b3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1896 identity=10307 ipv4=10.0.0.18 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5lxbf subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b15c095b3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1896 identity=10307 ipv4=10.0.0.18 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5lxbf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1350 identity=4 ipv4=10.0.0.56 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6b15c095b3 endpointID=1896 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-5lxbf subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=ff10743b-e3df-441f-b6be-edb355953af0 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=ff10743b-e3df-441f-b6be-edb355953af0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=6b15c095b3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1896 identity=10307 ipv4=10.0.0.18 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5lxbf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 ac75f3f6-d9d0-4541-bbf3-0c25170741c1 default }" containerID=03da0e82bf5926196ecab4460f6436715085a6d5e20f33a853a273701fefb26b datapathConfiguration="&{false false false false false }" interface=lxc80b6c8dfc590 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-l668c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03da0e82bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 ipv4=10.0.0.210 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-l668c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03da0e82bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.210 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-l668c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03da0e82bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identity=20507 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.210 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-l668c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03da0e82bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identity=20507 ipv4=10.0.0.210 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-l668c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=03da0e82bf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=298 identity=20507 ipv4=10.0.0.210 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-l668c subsys=endpoint level=info msg="Successful endpoint creation" containerID=03da0e82bf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=298 identity=20507 ipv4=10.0.0.210 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-l668c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3656 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03656 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03656 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03656 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03656:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3656 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 584b0319-6359-4135-b891-a5ca0dcb1c72 default }" containerID=62d494e1819a3943bf8381befc73fef813b594e39ee8f33697fcf8ac7b2d313d datapathConfiguration="&{false false false false false }" interface=lxcd8bff8d757b8 k8sPodName=kube-system/coredns-67659f764b-wgzgh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62d494e181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1313 ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-67659f764b-wgzgh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62d494e181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1313 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-67659f764b-wgzgh subsys=endpoint level=info msg="Identity of endpoint changed" containerID=62d494e181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1313 identity=14373 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-67659f764b-wgzgh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62d494e181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1313 identity=14373 ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-67659f764b-wgzgh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62d494e181 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1313 identity=14373 ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-67659f764b-wgzgh subsys=endpoint level=info msg="Successful endpoint creation" containerID=62d494e181 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1313 identity=14373 ipv4=10.0.0.112 ipv6= k8sPodName=kube-system/coredns-67659f764b-wgzgh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.108 3576d972-be8a-435f-8d40-e123d9c40165 default }" containerID=d81fe0d3ad21f604917e076082de6dbaa4a15c9c3261e32234041de9b7b076c2 datapathConfiguration="&{false false false false false }" interface=lxcf2732fd04e26 k8sPodName=kube-system/coredns-67659f764b-s86sb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d81fe0d3ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=793 ipv4=10.0.0.108 ipv6= k8sPodName=kube-system/coredns-67659f764b-s86sb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d81fe0d3ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=793 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.108 ipv6= k8sPodName=kube-system/coredns-67659f764b-s86sb subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d81fe0d3ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=793 identity=14373 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.108 ipv6= k8sPodName=kube-system/coredns-67659f764b-s86sb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d81fe0d3ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=793 identity=14373 ipv4=10.0.0.108 ipv6= k8sPodName=kube-system/coredns-67659f764b-s86sb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d81fe0d3ad datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=793 identity=14373 ipv4=10.0.0.108 ipv6= k8sPodName=kube-system/coredns-67659f764b-s86sb subsys=endpoint level=info msg="Successful endpoint creation" containerID=d81fe0d3ad datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=793 identity=14373 ipv4=10.0.0.108 ipv6= k8sPodName=kube-system/coredns-67659f764b-s86sb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.171 a6bb3c04-92ce-4c9f-8c8a-70e049c82932 default }" containerID=9226e0ee40b159b3dc193640ae4e084cdc4f5ff305b340ddfc0045b5fa386781 datapathConfiguration="&{false false false false false }" interface=lxc00264ee4d526 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nj6wr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9226e0ee40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nj6wr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9226e0ee40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nj6wr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9226e0ee40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nj6wr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9226e0ee40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identity=19166 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nj6wr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9226e0ee40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identity=19166 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nj6wr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9226e0ee40 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=903 identity=19166 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nj6wr subsys=endpoint level=info msg="Successful endpoint creation" containerID=9226e0ee40 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=903 identity=19166 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nj6wr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0ec3a3cccc endpointID=942 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-gpncw subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=0ec3a3cccc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=942 identity=14373 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gpncw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 9c9a5042-5034-4d1b-9310-f957512e38a0 default }" containerID=2dd8902b84592115a076bfe559ec52802824453fd4819c1d85353eeac1f040a2 datapathConfiguration="&{false false false false false }" interface=lxcb6e8b56bcc71 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ztgsp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2dd8902b84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ztgsp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2dd8902b84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ztgsp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2dd8902b84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 identity=11436 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ztgsp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2dd8902b84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 identity=11436 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ztgsp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 1ed4cc2c-ba21-41aa-ba34-b86ecc3df2a5 default }" containerID=4fddfbcc8fe32cca4bcace164c0e26b23737032e8968dbeef3f91fe711068992 datapathConfiguration="&{false false false false false }" interface=lxc00c4b80b9d2f k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s79nm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fddfbcc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 ipv4=10.0.0.72 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s79nm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fddfbcc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.72 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s79nm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fddfbcc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 identity=58270 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.72 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s79nm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4fddfbcc8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 identity=58270 ipv4=10.0.0.72 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s79nm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2dd8902b84 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=996 identity=11436 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ztgsp subsys=endpoint level=info msg="Successful endpoint creation" containerID=2dd8902b84 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=996 identity=11436 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ztgsp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.61 e655a639-4a05-4477-bdaf-66468a0bc366 default }" containerID=891277c32e9563be459797bcaa6f6b2766204325c4deeab04d680bb4b3de058a datapathConfiguration="&{false false false false false }" interface=lxc9701e76471dc k8sPodName=cert-manager/cert-manager-75c4c745bc-h5hds labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=891277c32e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3319 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-h5hds subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=891277c32e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3319 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-h5hds subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=891277c32e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3319 identity=57214 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-h5hds oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=891277c32e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3319 identity=57214 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-h5hds subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4fddfbcc8f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3285 identity=58270 ipv4=10.0.0.72 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s79nm subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fddfbcc8f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3285 identity=58270 ipv4=10.0.0.72 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s79nm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=891277c32e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3319 identity=57214 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-h5hds subsys=endpoint level=info msg="Successful endpoint creation" containerID=891277c32e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3319 identity=57214 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-h5hds subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.38 ec44b190-e1c5-4eb1-8f7a-3aecbd8130c3 default }" containerID=4fccb82161fd6406955d11615eec6f679b197dee6e36bd91c4d9142761663384 datapathConfiguration="&{false false false false false }" interface=lxcfdf5cae5a6d6 k8sPodName=cert-manager/cert-manager-startupapicheck-r8sq8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fccb82161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 ipv4=10.0.0.38 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r8sq8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fccb82161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c771f24f-0f95-4ff0-a7be-a53bfc7c35f4,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c771f24f-0f95-4ff0-a7be-a53bfc7c35f4,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.38 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r8sq8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=c771f24f-0f95-4ff0-a7be-a53bfc7c35f4;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=c771f24f-0f95-4ff0-a7be-a53bfc7c35f4;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fccb82161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identity=23813 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c771f24f-0f95-4ff0-a7be-a53bfc7c35f4,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c771f24f-0f95-4ff0-a7be-a53bfc7c35f4,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.38 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r8sq8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4fccb82161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identity=23813 ipv4=10.0.0.38 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r8sq8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4fccb82161 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=469 identity=23813 ipv4=10.0.0.38 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r8sq8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fccb82161 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=469 identity=23813 ipv4=10.0.0.38 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r8sq8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4fccb82161 endpointID=469 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-r8sq8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=c771f24f-0f95-4ff0-a7be-a53bfc7c35f4 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=c771f24f-0f95-4ff0-a7be-a53bfc7c35f4 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=4fccb82161 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=469 identity=23813 ipv4=10.0.0.38 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r8sq8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 11fc4a0f-54d0-4531-ba67-e13ca307ff28 default }" containerID=6bdfad08f843ae12d796bb2abd4a6c5571d426fe1aa850f48889cb0ebc31b0f8 datapathConfiguration="&{false false false false false }" interface=lxc171eabd3c610 k8sPodName=ingress-nginx/ingress-nginx-admission-create-ff6g5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bdfad08f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 ipv4=10.0.0.131 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ff6g5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bdfad08f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e071328d-695f-464c-a080-f5ea2ea35795,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=e071328d-695f-464c-a080-f5ea2ea35795,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.131 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ff6g5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=e071328d-695f-464c-a080-f5ea2ea35795;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=e071328d-695f-464c-a080-f5ea2ea35795;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bdfad08f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identity=31673 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e071328d-695f-464c-a080-f5ea2ea35795,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=e071328d-695f-464c-a080-f5ea2ea35795,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.131 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ff6g5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bdfad08f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identity=31673 ipv4=10.0.0.131 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ff6g5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6bdfad08f8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=937 identity=31673 ipv4=10.0.0.131 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ff6g5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bdfad08f8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=937 identity=31673 ipv4=10.0.0.131 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ff6g5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6bdfad08f8 endpointID=937 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-ff6g5 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=e071328d-695f-464c-a080-f5ea2ea35795 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=e071328d-695f-464c-a080-f5ea2ea35795 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=6bdfad08f8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=937 identity=31673 ipv4=10.0.0.131 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ff6g5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 51c31ba4-894c-4c53-8ae4-e00fc615f884 default }" containerID=e9ae45273c460c763363463214e6b6aef5f8bd29f04e54f4275b92212c64e14d datapathConfiguration="&{false false false false false }" interface=lxce1285027ab5f k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bjwml labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9ae45273c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bjwml subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9ae45273c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bjwml subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e9ae45273c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bjwml line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9ae45273c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 identity=6443 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bjwml oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9ae45273c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 identity=6443 ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bjwml subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9ae45273c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1076 identity=6443 ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bjwml subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9ae45273c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1076 identity=6443 ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-bjwml subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.19 2ab35b28-9a9f-48b1-b3e7-cbd9ff5d23ab default }" containerID=99df5e5a2e38df526e02556dd9c9a826bfeae28522a1d16f6ca305f7febc9327 datapathConfiguration="&{false false false false false }" interface=lxc17a81dc5eb26 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6nvdl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99df5e5a2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2524 ipv4=10.0.0.19 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6nvdl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99df5e5a2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2524 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4d493393-0e81-4d5c-9504-198d16f79eb2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=4d493393-0e81-4d5c-9504-198d16f79eb2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.19 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6nvdl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=4d493393-0e81-4d5c-9504-198d16f79eb2;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=4d493393-0e81-4d5c-9504-198d16f79eb2;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99df5e5a2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2524 identity=30063 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4d493393-0e81-4d5c-9504-198d16f79eb2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=4d493393-0e81-4d5c-9504-198d16f79eb2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.19 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6nvdl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99df5e5a2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2524 identity=30063 ipv4=10.0.0.19 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6nvdl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99df5e5a2e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2524 identity=30063 ipv4=10.0.0.19 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6nvdl subsys=endpoint level=info msg="Successful endpoint creation" containerID=99df5e5a2e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2524 identity=30063 ipv4=10.0.0.19 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6nvdl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=99df5e5a2e endpointID=2524 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-6nvdl subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=4d493393-0e81-4d5c-9504-198d16f79eb2 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=4d493393-0e81-4d5c-9504-198d16f79eb2 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=99df5e5a2e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2524 identity=30063 ipv4=10.0.0.19 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6nvdl subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=5a9deb23-4ea2-4359-9bfa-8958ec0a08d2] Description:}]" policyAddRequest=5a430dae-e4e0-4419-8dde-a497bd3cc96f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5a430dae-e4e0-4419-8dde-a497bd3cc96f policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=946b3ab0-69c0-43c3-ae33-25ebca9fcbee] Description:}]" policyAddRequest=e64045c4-8ed5-4030-a15b-ed558ce903e8 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=e64045c4-8ed5-4030-a15b-ed558ce903e8 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.241 b43dd911-7b99-4ea5-8378-325e7e14d712 default }" containerID=90276cf2889dc7d02ec75a463bbe29c854309bb8eebf38b5a0fa97ed9174410f datapathConfiguration="&{false false false false false }" interface=lxc14003663f688 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-42gdc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90276cf288 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2059 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-42gdc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90276cf288 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2059 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-42gdc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90276cf288 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2059 identity=10869 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-42gdc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90276cf288 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2059 identity=10869 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-42gdc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=90276cf288 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2059 identity=10869 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-42gdc subsys=endpoint level=info msg="Successful endpoint creation" containerID=90276cf288 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2059 identity=10869 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-42gdc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.167 73c82ab6-9f00-4fd8-9b58-8e015b26bc7a default }" containerID=5f0f307bb177e84ceeb779c5324908562378dcfc425e44c0bc5e4e063003aad8 datapathConfiguration="&{false false false false false }" interface=lxccc3a6a0616e4 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-f9jhl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f0f307bb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-f9jhl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f0f307bb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-f9jhl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f0f307bb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 identity=1883 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-f9jhl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f0f307bb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 identity=1883 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-f9jhl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5f0f307bb1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=492 identity=1883 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-f9jhl subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f0f307bb1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=492 identity=1883 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-f9jhl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.192 0fc83a97-8378-44c9-93b6-1f16b3ec862e default }" containerID=7d4cae3f20c67a9f9934cd3720773b81eb071980530e95fb7bb0a493c325c324 datapathConfiguration="&{false false false false false }" interface=lxc55ff5a6c4ef9 k8sPodName=openstack/pxc-operator-69cb5bbdb9-bc9f2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d4cae3f20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bc9f2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d4cae3f20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bc9f2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d4cae3f20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=58479 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bc9f2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d4cae3f20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=58479 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bc9f2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d4cae3f20 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=14 identity=58479 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bc9f2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d4cae3f20 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=14 identity=58479 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bc9f2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.115 baad8d30-e9dc-4280-847c-992a1eecb49d default }" containerID=01eeaadda430c426234e5c57704ee333dc59798bb36348fc68f3f2be8da223f3 datapathConfiguration="&{false false false false false }" interface=lxca3c5ebba7f3f k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01eeaadda4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=691 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01eeaadda4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=691 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01eeaadda4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=691 identity=36960 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=01eeaadda4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=691 identity=36960 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01eeaadda4 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=691 identity=36960 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=01eeaadda4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=691 identity=36960 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.17 e9dad395-2911-4866-968e-373275924a72 default }" containerID=84c4696042b7b79f12faddac6042dc4d6992cb1f1180d6a30991fe1d45770b90 datapathConfiguration="&{false false false false false }" interface=lxc47bca014e286 k8sPodName=local-path-storage/helper-pod-create-pvc-9728daf4-ee02-41d3-bcba-9f04eb198b13 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84c4696042 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9728daf4-ee02-41d3-bcba-9f04eb198b13 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84c4696042 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9728daf4-ee02-41d3-bcba-9f04eb198b13 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84c4696042 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identity=13251 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9728daf4-ee02-41d3-bcba-9f04eb198b13 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84c4696042 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identity=13251 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9728daf4-ee02-41d3-bcba-9f04eb198b13 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=84c4696042 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=185 identity=13251 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9728daf4-ee02-41d3-bcba-9f04eb198b13 subsys=endpoint level=info msg="Successful endpoint creation" containerID=84c4696042 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=185 identity=13251 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9728daf4-ee02-41d3-bcba-9f04eb198b13 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=84c4696042 endpointID=185 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9728daf4-ee02-41d3-bcba-9f04eb198b13 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=84c4696042 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=185 identity=13251 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9728daf4-ee02-41d3-bcba-9f04eb198b13 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 d6a97502-45af-4d6f-bfdd-cab713486591 default }" containerID=00d9ecea53112807d91e09996b00f411c22e6e5df2a0fbafc04b9add316ec72b datapathConfiguration="&{false false false false false }" interface=lxc1e60b698dd2b k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00d9ecea53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=392 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00d9ecea53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=392 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=00d9ecea53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=392 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.62 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00d9ecea53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=392 identity=53085 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00d9ecea53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=392 identity=53085 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00d9ecea53 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=392 identity=53085 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=00d9ecea53 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=392 identity=53085 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=5996e4dd-b721-4191-b22b-f6a39357c5a5] Description:}]" policyAddRequest=f6c3d499-64f7-455e-b0b1-779602b5c260 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f6c3d499-64f7-455e-b0b1-779602b5c260 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.209 2b1ddba3-6aa9-464c-b9ee-cbf9368b307a default }" containerID=5bcacabc4d5e9bf4f7815e583aa8696d0a61cee02168f1453714592f8579c0b8 datapathConfiguration="&{false false false false false }" interface=lxca486a9f9f0e4 k8sPodName=local-path-storage/helper-pod-create-pvc-aca8df35-485d-4fc3-a5cf-2359f607d83b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5bcacabc4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2678 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aca8df35-485d-4fc3-a5cf-2359f607d83b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5bcacabc4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2678 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aca8df35-485d-4fc3-a5cf-2359f607d83b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5bcacabc4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2678 identity=13251 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aca8df35-485d-4fc3-a5cf-2359f607d83b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5bcacabc4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2678 identity=13251 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aca8df35-485d-4fc3-a5cf-2359f607d83b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5bcacabc4d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2678 identity=13251 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aca8df35-485d-4fc3-a5cf-2359f607d83b subsys=endpoint level=info msg="Successful endpoint creation" containerID=5bcacabc4d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2678 identity=13251 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aca8df35-485d-4fc3-a5cf-2359f607d83b subsys=daemon level=info msg="Delete endpoint request" containerID=5bcacabc4d endpointID=2678 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-aca8df35-485d-4fc3-a5cf-2359f607d83b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5bcacabc4d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2678 identity=13251 ipv4=10.0.0.209 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aca8df35-485d-4fc3-a5cf-2359f607d83b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 d51a1f43-5c82-4b91-8af9-afbc39d96c3d default }" containerID=7ee5fa50abc2c4bf54dec0b8b8c286d98a92633469c76b9dcd4cba7cbd060883 datapathConfiguration="&{false false false false false }" interface=lxc67c258cf7ba1 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ee5fa50ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ee5fa50ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7ee5fa50ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 identity=40168 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ee5fa50ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 identity=40168 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ee5fa50ab datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=884 identity=40168 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ee5fa50ab datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=884 identity=40168 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=568eeb52-813f-43b9-b1d8-a11c58f9a32f] Description:}]" policyAddRequest=f1a59e6d-a8ce-4fcc-a0d0-a7e5e3fec631 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f1a59e6d-a8ce-4fcc-a0d0-a7e5e3fec631 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.101 ddae9943-c613-45a7-8dc1-b26c9636adfb default }" containerID=0fe2120f743be1f810cfa1bb1a68d4d07ef3c516c463d3ee14a2a5519a77f632 datapathConfiguration="&{false false false false false }" interface=lxc22408e484628 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fe2120f74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2115 ipv4=10.0.0.101 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fe2120f74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2115 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.101 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0fe2120f74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2115 identity=52747 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.101 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fe2120f74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2115 identity=52747 ipv4=10.0.0.101 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0fe2120f74 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2115 identity=52747 ipv4=10.0.0.101 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fe2120f74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2115 identity=52747 ipv4=10.0.0.101 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.01037848147496855 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.82 ba1e6781-0904-458a-972a-a9f9fda661f9 default }" containerID=02a31eb93cf24ea09d98b0da765cdbc3c011cd1b028cb35f70fd14411f8eb162 datapathConfiguration="&{false false false false false }" interface=lxcc6adf33ce553 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cpmhp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02a31eb93c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cpmhp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02a31eb93c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cpmhp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02a31eb93c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 identity=26371 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cpmhp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=02a31eb93c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 identity=26371 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cpmhp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 9d204469-a427-41c4-9639-17bbd0747bac default }" containerID=f01b6d1ea13f17846ec5b38029216154c0c74a17dbf9cf1b173517b5987ea5ae datapathConfiguration="&{false false false false false }" interface=lxc73dab7047e27 k8sPodName=monitoring/node-feature-discovery-worker-wn6rr labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.34 f045b90d-2f76-44cb-9f8f-186242b5ea54 default }" containerID=512c1820cd05ba2c6dbb68c1a435e8c59a34bdf1492f772eae49126fdd6edbdd datapathConfiguration="&{false false false false false }" interface=lxcad03178c1bf1 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jh647 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f01b6d1ea1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3848 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wn6rr subsys=endpoint level=info msg="New endpoint" containerID=512c1820cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jh647 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f01b6d1ea1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3848 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wn6rr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=512c1820cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jh647 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=f01b6d1ea1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3848 identity=19850 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wn6rr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f01b6d1ea1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3848 identity=19850 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wn6rr subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=512c1820cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 identity=6933 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jh647 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=512c1820cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 identity=6933 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jh647 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=02a31eb93c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1153 identity=26371 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cpmhp subsys=endpoint level=info msg="Successful endpoint creation" containerID=02a31eb93c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1153 identity=26371 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cpmhp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f01b6d1ea1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3848 identity=19850 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wn6rr subsys=endpoint level=info msg="Successful endpoint creation" containerID=f01b6d1ea1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3848 identity=19850 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wn6rr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=512c1820cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1502 identity=6933 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jh647 subsys=endpoint level=info msg="Successful endpoint creation" containerID=512c1820cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1502 identity=6933 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jh647 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.13 c4e1c23d-bd25-43b2-b821-91d128b67e6e default }" containerID=beb0dea961226f1f25001c901b0372d0e509480a89b4f5740271169db6ebd6ab datapathConfiguration="&{false false false false false }" interface=lxc16e4c8609438 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zspgr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=beb0dea961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1401 ipv4=10.0.0.13 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zspgr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=beb0dea961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1401 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.13 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zspgr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=beb0dea961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1401 identity=4043 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.13 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zspgr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=beb0dea961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1401 identity=4043 ipv4=10.0.0.13 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zspgr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=beb0dea961 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1401 identity=4043 ipv4=10.0.0.13 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zspgr subsys=endpoint level=info msg="Successful endpoint creation" containerID=beb0dea961 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1401 identity=4043 ipv4=10.0.0.13 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zspgr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3656 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03656 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03656 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03656 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03656:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3656 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 2fc460a3-9867-416a-af81-3b4cb8833ef5 default }" containerID=4c67bca8a0458bdcbb03072d4bd910ab7b9d57afc0d9e60cbda733d33becb52b datapathConfiguration="&{false false false false false }" interface=lxc41000b5871ca k8sPodName=monitoring/kube-prometheus-stack-admission-create-gjnfc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c67bca8a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2442 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gjnfc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c67bca8a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2442 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=61ee49f8-b8bb-4bd0-bbf4-2d31ba82a9d2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=61ee49f8-b8bb-4bd0-bbf4-2d31ba82a9d2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gjnfc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=61ee49f8-b8bb-4bd0-bbf4-2d31ba82a9d2;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=61ee49f8-b8bb-4bd0-bbf4-2d31ba82a9d2;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4c67bca8a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2442 identity=668 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=61ee49f8-b8bb-4bd0-bbf4-2d31ba82a9d2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=61ee49f8-b8bb-4bd0-bbf4-2d31ba82a9d2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gjnfc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c67bca8a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2442 identity=668 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gjnfc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c67bca8a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2442 identity=668 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gjnfc subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c67bca8a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2442 identity=668 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gjnfc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4c67bca8a0 endpointID=2442 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-gjnfc subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=61ee49f8-b8bb-4bd0-bbf4-2d31ba82a9d2 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=61ee49f8-b8bb-4bd0-bbf4-2d31ba82a9d2 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=4c67bca8a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2442 identity=668 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-gjnfc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 fe0bea1e-dc2e-4c5c-81b4-e3ac072134db default }" containerID=3724ceb77606fc658a650cf7f9be77f3abf19578519007dbb5313ba54d62b2fc datapathConfiguration="&{false false false false false }" interface=lxccadf3999f269 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-svgwx labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.223 c1e426ee-aea0-462b-877c-dff58505edc9 default }" containerID=47840bdbd0c24f8b363bc02a8186cce4177bbfc74982f2abb1268621cec05aea datapathConfiguration="&{false false false false false }" interface=lxc19022b9802b5 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gmk8s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3724ceb776 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-svgwx subsys=endpoint level=info msg="New endpoint" containerID=47840bdbd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3490 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gmk8s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47840bdbd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3490 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gmk8s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=3724ceb776 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-svgwx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=47840bdbd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3490 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gmk8s line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=3724ceb776 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-svgwx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47840bdbd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3490 identity=10794 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gmk8s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47840bdbd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3490 identity=10794 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gmk8s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3724ceb776 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 identity=17712 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-svgwx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3724ceb776 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 identity=17712 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-svgwx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 722605f8-36e5-45d1-9f53-9c8123586268 default }" containerID=6cb732f130422c94286d0e04fc657283a2d4a7cdfb3da15fb3ea094f3769a17e datapathConfiguration="&{false false false false false }" interface=lxc90e8794389e3 k8sPodName=monitoring/kube-prometheus-stack-grafana-68f847c865-vt6nl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6cb732f130 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-68f847c865-vt6nl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6cb732f130 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-68f847c865-vt6nl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6cb732f130 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identity=1882 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-68f847c865-vt6nl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6cb732f130 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identity=1882 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-68f847c865-vt6nl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3724ceb776 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1007 identity=17712 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-svgwx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3724ceb776 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1007 identity=17712 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-svgwx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=47840bdbd0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3490 identity=10794 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gmk8s subsys=endpoint level=info msg="Successful endpoint creation" containerID=47840bdbd0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3490 identity=10794 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-gmk8s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6cb732f130 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=164 identity=1882 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-68f847c865-vt6nl subsys=endpoint level=info msg="Successful endpoint creation" containerID=6cb732f130 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=164 identity=1882 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-68f847c865-vt6nl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.184 2f8d88d5-bb2e-4761-babb-45564294ff0a default }" containerID=6951372d1abac454bb18a25fcff93ec47b1c6263b71a32b812bb2702e93be2f1 datapathConfiguration="&{false false false false false }" interface=lxca54dfa5d3f62 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m2nqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6951372d1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m2nqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6951372d1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=70ddd295-5f0f-4812-9e16-47c1d15c0ad5,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=70ddd295-5f0f-4812-9e16-47c1d15c0ad5,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m2nqb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=70ddd295-5f0f-4812-9e16-47c1d15c0ad5;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=70ddd295-5f0f-4812-9e16-47c1d15c0ad5;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6951372d1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identity=52772 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=70ddd295-5f0f-4812-9e16-47c1d15c0ad5,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=70ddd295-5f0f-4812-9e16-47c1d15c0ad5,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m2nqb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6951372d1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identity=52772 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m2nqb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6951372d1a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=310 identity=52772 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m2nqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=6951372d1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=310 identity=52772 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m2nqb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.137 4df7a2ae-125e-4ecc-bf40-24cf9332cd02 default }" containerID=46613578b60203d24a0044212396b5e05c6b0749a1eac52024a0caa53835e433 datapathConfiguration="&{false false false false false }" interface=lxc99b515d72829 k8sPodName=local-path-storage/helper-pod-create-pvc-4f287d04-7cf0-4d46-b87f-8ae5cf052c6b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46613578b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f287d04-7cf0-4d46-b87f-8ae5cf052c6b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46613578b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f287d04-7cf0-4d46-b87f-8ae5cf052c6b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46613578b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 identity=13251 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f287d04-7cf0-4d46-b87f-8ae5cf052c6b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46613578b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 identity=13251 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f287d04-7cf0-4d46-b87f-8ae5cf052c6b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46613578b6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2106 identity=13251 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f287d04-7cf0-4d46-b87f-8ae5cf052c6b subsys=endpoint level=info msg="Successful endpoint creation" containerID=46613578b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2106 identity=13251 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f287d04-7cf0-4d46-b87f-8ae5cf052c6b subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.125 518e3a80-4aae-491a-ae1c-f703ab1f1f98 default }" containerID=f0cec7223c2326678ac95837a6d8d8cb45c4590f751f8c283b0366efda868a95 datapathConfiguration="&{false false false false false }" interface=lxc2f3bfd69507a k8sPodName=local-path-storage/helper-pod-create-pvc-8dac310c-ab36-4f37-bee1-1191db27e641 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0cec7223c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dac310c-ab36-4f37-bee1-1191db27e641 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0cec7223c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dac310c-ab36-4f37-bee1-1191db27e641 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f0cec7223c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 identity=13251 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dac310c-ab36-4f37-bee1-1191db27e641 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0cec7223c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 identity=13251 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dac310c-ab36-4f37-bee1-1191db27e641 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f0cec7223c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1719 identity=13251 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dac310c-ab36-4f37-bee1-1191db27e641 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0cec7223c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1719 identity=13251 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dac310c-ab36-4f37-bee1-1191db27e641 subsys=daemon level=info msg="Delete endpoint request" containerID=6951372d1a endpointID=310 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-m2nqb subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=70ddd295-5f0f-4812-9e16-47c1d15c0ad5 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=70ddd295-5f0f-4812-9e16-47c1d15c0ad5 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=6951372d1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=310 identity=52772 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m2nqb subsys=endpoint level=info msg="Delete endpoint request" containerID=46613578b6 endpointID=2106 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4f287d04-7cf0-4d46-b87f-8ae5cf052c6b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=f0cec7223c endpointID=1719 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8dac310c-ab36-4f37-bee1-1191db27e641 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=46613578b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2106 identity=13251 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f287d04-7cf0-4d46-b87f-8ae5cf052c6b subsys=endpoint level=info msg="Removed endpoint" containerID=f0cec7223c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1719 identity=13251 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8dac310c-ab36-4f37-bee1-1191db27e641 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 c1378118-67fa-4362-91a6-a967daca59bc default }" containerID=9e5ab8f52ca8a38e25cb61a5319f1f016d456ce2f564569ffb67543e849f3d15 datapathConfiguration="&{false false false false false }" interface=lxc7a9a0b4eb402 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e5ab8f52c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e5ab8f52c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9e5ab8f52c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e5ab8f52c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 identity=33000 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e5ab8f52c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 identity=33000 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e5ab8f52c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=222 identity=33000 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e5ab8f52c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=222 identity=33000 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.117 a56da14a-5b32-4c73-aa7a-ea16f9a1cd4c default }" containerID=b2ed6645a466be90928cb895b4db35c3a51abd6a2abccd3196c735aaa5aae427 datapathConfiguration="&{false false false false false }" interface=lxc089848c8430e k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2ed6645a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2994 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2ed6645a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2994 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b2ed6645a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2994 identity=31824 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2ed6645a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2994 identity=31824 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2ed6645a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2994 identity=31824 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2ed6645a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2994 identity=31824 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.229 609a1564-1ea8-49ef-93a0-8cde43e8d997 default }" containerID=b8e788b174d1e65bbed1978d9a31caa8ae1fe9f0661bdc9e0018f6aa259b7069 datapathConfiguration="&{false false false false false }" interface=lxc59b81e590f8b k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8e788b174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 2f09ac24-0097-45eb-84d0-1a7c2112baa1 default }" containerID=222f982b05ee0e8ea0815f94b2b21e0d14ce42fc40db25890e8ab47aee7037b0 datapathConfiguration="&{false false false false false }" interface=lxcc925ca9e8c10 k8sPodName=monitoring/loki-gateway-cf54cb88c-vjvw9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=222f982b05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3621 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vjvw9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8e788b174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=222f982b05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3621 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vjvw9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=222f982b05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3621 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vjvw9 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=b8e788b174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8e788b174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 identity=24474 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8e788b174 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=985 identity=24474 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=222f982b05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3621 identity=3873 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vjvw9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=222f982b05 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3621 identity=3873 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vjvw9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 d765e853-5764-4acf-a3cb-a582a4e87e08 default }" containerID=885a82d3a67af1c9f60e07f2cb7db537f6e8574e2839be4fd9d1e85f1d27aaa8 datapathConfiguration="&{false false false false false }" interface=lxcfdbb2e2ab171 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=885a82d3a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=885a82d3a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=885a82d3a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=5291 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=885a82d3a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=5291 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=222f982b05 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3621 identity=3873 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vjvw9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=222f982b05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3621 identity=3873 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vjvw9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=885a82d3a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=295 identity=5291 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=885a82d3a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=295 identity=5291 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b8e788b174 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=985 identity=24474 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8e788b174 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=985 identity=24474 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.43 52faffb5-2c80-4aed-a4b9-d46183c67faf default }" containerID=c7edae7289d428b00a3323d16e25a66ff6b700704f69dfbd8abd0754bc6f759c datapathConfiguration="&{false false false false false }" interface=lxc73aacd7ad7c3 k8sPodName=local-path-storage/helper-pod-create-pvc-3d435ebd-7715-4c7e-ae8f-03899086920c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7edae7289 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d435ebd-7715-4c7e-ae8f-03899086920c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7edae7289 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d435ebd-7715-4c7e-ae8f-03899086920c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7edae7289 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 identity=13251 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d435ebd-7715-4c7e-ae8f-03899086920c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7edae7289 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 identity=13251 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d435ebd-7715-4c7e-ae8f-03899086920c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c7edae7289 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1665 identity=13251 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d435ebd-7715-4c7e-ae8f-03899086920c subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7edae7289 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1665 identity=13251 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d435ebd-7715-4c7e-ae8f-03899086920c subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.18 813e7807-f192-4810-a554-4243e2038085 default }" containerID=c9836b9b91b570cf0d56a5320a82cfb749e4eff77ac19c1026d5cd21737116a9 datapathConfiguration="&{false false false false false }" interface=lxc4abfc32340b9 k8sPodName=monitoring/vector-xd4zs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9836b9b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3205 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/vector-xd4zs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9836b9b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3205 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/vector-xd4zs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c9836b9b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3205 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/vector-xd4zs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9836b9b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3205 identity=10183 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/vector-xd4zs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9836b9b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3205 identity=10183 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/vector-xd4zs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9836b9b91 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3205 identity=10183 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/vector-xd4zs subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9836b9b91 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3205 identity=10183 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/vector-xd4zs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c7edae7289 endpointID=1665 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3d435ebd-7715-4c7e-ae8f-03899086920c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c7edae7289 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1665 identity=13251 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d435ebd-7715-4c7e-ae8f-03899086920c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 4214149b-ed78-44ed-9c20-6edc7c930576 default }" containerID=a1f5bba4345b2546057cf695f0fce12a6cce7301d42e4ac8ab37781092053de9 datapathConfiguration="&{false false false false false }" interface=lxcee6134ff11e8 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1f5bba434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1027 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1f5bba434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1027 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a1f5bba434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1027 identity=6976 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1f5bba434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1027 identity=6976 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1f5bba434 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1027 identity=6976 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1f5bba434 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1027 identity=6976 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.19 0a401c73-5277-4248-adda-22a3263274c8 default }" containerID=e98663073ab91fb8c592dc3ee7588db25befb28f935cbe126f0fe71535aa1f9f datapathConfiguration="&{false false false false false }" interface=lxc8c04f7a33be0 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wbpth labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e98663073a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wbpth subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e98663073a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wbpth subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e98663073a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 identity=37624 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wbpth oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e98663073a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 identity=37624 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wbpth subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e98663073a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=96 identity=37624 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wbpth subsys=endpoint level=info msg="Successful endpoint creation" containerID=e98663073a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=96 identity=37624 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wbpth subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.224 395bd1ac-66f9-438b-afcb-04cfefc48eb5 default }" containerID=7fe18a2aee0e47bfc7303832bfe40a5abbcc9858bcc3dfc0fb48dafb117681a7 datapathConfiguration="&{false false false false false }" interface=lxc7f91005aab74 k8sPodName=openstack/memcached-memcached-6479589586-gfgpt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7fe18a2aee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=754 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gfgpt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7fe18a2aee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=754 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gfgpt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7fe18a2aee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=754 identity=26472 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gfgpt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7fe18a2aee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=754 identity=26472 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gfgpt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7fe18a2aee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=754 identity=26472 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gfgpt subsys=endpoint level=info msg="Successful endpoint creation" containerID=7fe18a2aee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=754 identity=26472 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gfgpt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.207 16a5780b-55fd-41cc-adb1-702a88af3b51 default }" containerID=859df2a62cacfa19acd09b85a6b1dd26d6649fee9f41c68b060528dbd280c287 datapathConfiguration="&{false false false false false }" interface=lxc4a0776447cb6 k8sPodName=local-path-storage/helper-pod-create-pvc-8980c3cf-21b0-4de7-8dda-63a104f83f28 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=859df2a62c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8980c3cf-21b0-4de7-8dda-63a104f83f28 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=859df2a62c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8980c3cf-21b0-4de7-8dda-63a104f83f28 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=859df2a62c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identity=13251 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8980c3cf-21b0-4de7-8dda-63a104f83f28 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=859df2a62c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identity=13251 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8980c3cf-21b0-4de7-8dda-63a104f83f28 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=859df2a62c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=841 identity=13251 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8980c3cf-21b0-4de7-8dda-63a104f83f28 subsys=endpoint level=info msg="Successful endpoint creation" containerID=859df2a62c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=841 identity=13251 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8980c3cf-21b0-4de7-8dda-63a104f83f28 subsys=daemon level=info msg="Delete endpoint request" containerID=859df2a62c endpointID=841 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8980c3cf-21b0-4de7-8dda-63a104f83f28 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=859df2a62c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=841 identity=13251 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8980c3cf-21b0-4de7-8dda-63a104f83f28 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 cdc316ef-4043-4d94-b7a4-b5126a683735 default }" containerID=72c382c56ab63348daa37ed9f80883e00548a62cb121ab5a931a69a63d896c18 datapathConfiguration="&{false false false false false }" interface=lxc99daa201cf6b k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72c382c56a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=738 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72c382c56a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=738 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72c382c56a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=738 identity=29662 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72c382c56a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=738 identity=29662 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=72c382c56a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=738 identity=29662 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=72c382c56a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=738 identity=29662 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.134 a30e5fa0-6a57-4139-a269-7b85c60ddd61 default }" containerID=da1c4ef438b63f62992a9d0a65c259de62cc0d8adaed821fd640dd5d1db2440e datapathConfiguration="&{false false false false false }" interface=lxc3f6fd3fe9a2b k8sPodName=openstack/keystone-api-786655c5cd-cblh7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da1c4ef438 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-api-786655c5cd-cblh7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da1c4ef438 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-api-786655c5cd-cblh7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=da1c4ef438 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-api-786655c5cd-cblh7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da1c4ef438 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identity=8673 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-api-786655c5cd-cblh7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da1c4ef438 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identity=8673 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-api-786655c5cd-cblh7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da1c4ef438 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=13 identity=8673 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-api-786655c5cd-cblh7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=da1c4ef438 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=13 identity=8673 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-api-786655c5cd-cblh7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.162 aaa8c218-a867-42f9-ba2f-b6e01e966f0d default }" containerID=9e9b16e580c5d3264581457b98df3ad4f8a166c0cc631a519661a02f8616f788 datapathConfiguration="&{false false false false false }" interface=lxc6abf7771d985 k8sPodName=openstack/keystone-credential-setup-mz6hd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e9b16e580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-credential-setup-mz6hd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e9b16e580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=85d77f12-4042-40e0-b0ea-8b839ab23f08,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=85d77f12-4042-40e0-b0ea-8b839ab23f08,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-credential-setup-mz6hd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=85d77f12-4042-40e0-b0ea-8b839ab23f08;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=85d77f12-4042-40e0-b0ea-8b839ab23f08;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e9b16e580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identity=11971 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=85d77f12-4042-40e0-b0ea-8b839ab23f08,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=85d77f12-4042-40e0-b0ea-8b839ab23f08,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-credential-setup-mz6hd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e9b16e580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identity=11971 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-credential-setup-mz6hd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e9b16e580 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=93 identity=11971 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-credential-setup-mz6hd subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e9b16e580 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=93 identity=11971 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-credential-setup-mz6hd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9e9b16e580 endpointID=93 k8sNamespace=openstack k8sPodName=keystone-credential-setup-mz6hd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=85d77f12-4042-40e0-b0ea-8b839ab23f08 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=85d77f12-4042-40e0-b0ea-8b839ab23f08 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9e9b16e580 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=93 identity=11971 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-credential-setup-mz6hd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 5531255d-673f-48d9-824f-f09200792ccc default }" containerID=ade1fc609649ddc74ea271cf399e0a565d650742983d9a4c173ce1a31d342972 datapathConfiguration="&{false false false false false }" interface=lxc85d87311c753 k8sPodName=openstack/keystone-db-init-lh24x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ade1fc6096 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-db-init-lh24x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ade1fc6096 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=026ee8a8-8f33-475a-82ca-d74b5c8c7a2d,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=026ee8a8-8f33-475a-82ca-d74b5c8c7a2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-db-init-lh24x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=026ee8a8-8f33-475a-82ca-d74b5c8c7a2d;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=026ee8a8-8f33-475a-82ca-d74b5c8c7a2d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ade1fc6096 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=1394 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=026ee8a8-8f33-475a-82ca-d74b5c8c7a2d,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=026ee8a8-8f33-475a-82ca-d74b5c8c7a2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-db-init-lh24x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ade1fc6096 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=1394 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-db-init-lh24x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ade1fc6096 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=45 identity=1394 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-db-init-lh24x subsys=endpoint level=info msg="Successful endpoint creation" containerID=ade1fc6096 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=45 identity=1394 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-db-init-lh24x subsys=daemon level=info msg="Delete endpoint request" containerID=ade1fc6096 endpointID=45 k8sNamespace=openstack k8sPodName=keystone-db-init-lh24x subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=026ee8a8-8f33-475a-82ca-d74b5c8c7a2d k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=026ee8a8-8f33-475a-82ca-d74b5c8c7a2d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ade1fc6096 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=45 identity=1394 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-db-init-lh24x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 f23304fc-b0e8-4e81-8ade-ee373147f983 default }" containerID=81ee714e1340f4edbe2e53d19766fa39f32ccbbcfd57ecb285a02782ca021df4 datapathConfiguration="&{false false false false false }" interface=lxc5b72eda95107 k8sPodName=openstack/keystone-fernet-setup-xfts6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81ee714e13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-fernet-setup-xfts6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81ee714e13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=125ceb82-f1b3-4607-a3e7-ebc35462f53f,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=125ceb82-f1b3-4607-a3e7-ebc35462f53f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-fernet-setup-xfts6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=81ee714e13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-fernet-setup-xfts6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=125ceb82-f1b3-4607-a3e7-ebc35462f53f;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=125ceb82-f1b3-4607-a3e7-ebc35462f53f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81ee714e13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identity=65092 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=125ceb82-f1b3-4607-a3e7-ebc35462f53f,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=125ceb82-f1b3-4607-a3e7-ebc35462f53f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-fernet-setup-xfts6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81ee714e13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identity=65092 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-fernet-setup-xfts6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81ee714e13 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=373 identity=65092 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-fernet-setup-xfts6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81ee714e13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=373 identity=65092 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-fernet-setup-xfts6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=81ee714e13 endpointID=373 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-xfts6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=125ceb82-f1b3-4607-a3e7-ebc35462f53f k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=125ceb82-f1b3-4607-a3e7-ebc35462f53f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=81ee714e13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=373 identity=65092 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-fernet-setup-xfts6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 9486921a-9c21-4356-97af-00ecef0a252d default }" containerID=c7567128244e46b69b6b74c62edeed792029bf31f1cebfa3b0dd12366d130846 datapathConfiguration="&{false false false false false }" interface=lxcc1c9c802503a k8sPodName=openstack/keystone-db-sync-lvjnc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c756712824 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-sync-lvjnc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c756712824 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=304ddaa3-2a1b-4b3b-b700-0ef5c3b3b65b,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=304ddaa3-2a1b-4b3b-b700-0ef5c3b3b65b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-sync-lvjnc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=304ddaa3-2a1b-4b3b-b700-0ef5c3b3b65b;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=304ddaa3-2a1b-4b3b-b700-0ef5c3b3b65b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c756712824 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 identity=2050 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=304ddaa3-2a1b-4b3b-b700-0ef5c3b3b65b,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=304ddaa3-2a1b-4b3b-b700-0ef5c3b3b65b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-sync-lvjnc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c756712824 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=696 identity=2050 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-sync-lvjnc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c756712824 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=696 identity=2050 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-sync-lvjnc subsys=endpoint level=info msg="Successful endpoint creation" containerID=c756712824 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=696 identity=2050 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-sync-lvjnc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c756712824 endpointID=696 k8sNamespace=openstack k8sPodName=keystone-db-sync-lvjnc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=304ddaa3-2a1b-4b3b-b700-0ef5c3b3b65b k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=304ddaa3-2a1b-4b3b-b700-0ef5c3b3b65b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c756712824 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=696 identity=2050 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-sync-lvjnc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 bab1b4fe-21f5-4d09-9f81-22f0279d1f8f default }" containerID=534c89a6e6482fdd8ba67f68eea92ae5f5a064795d7537fe7b4ffaf47e0ed11b datapathConfiguration="&{false false false false false }" interface=lxc2fbc59372c94 k8sPodName=openstack/keystone-rabbit-init-s4rqs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=534c89a6e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-rabbit-init-s4rqs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=534c89a6e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=431d6696-4b3d-423a-9695-02ebba4046fd,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=431d6696-4b3d-423a-9695-02ebba4046fd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-rabbit-init-s4rqs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=431d6696-4b3d-423a-9695-02ebba4046fd;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=431d6696-4b3d-423a-9695-02ebba4046fd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=534c89a6e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identity=17310 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=431d6696-4b3d-423a-9695-02ebba4046fd,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=431d6696-4b3d-423a-9695-02ebba4046fd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-rabbit-init-s4rqs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=534c89a6e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identity=17310 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-rabbit-init-s4rqs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=534c89a6e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=719 identity=17310 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-rabbit-init-s4rqs subsys=endpoint level=info msg="Successful endpoint creation" containerID=534c89a6e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=719 identity=17310 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-rabbit-init-s4rqs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=534c89a6e6 endpointID=719 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-s4rqs subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=431d6696-4b3d-423a-9695-02ebba4046fd k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=431d6696-4b3d-423a-9695-02ebba4046fd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=534c89a6e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=719 identity=17310 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-rabbit-init-s4rqs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 12654239-bc31-46c2-ae4b-5c1908d9f4b2 default }" containerID=401911d1b85c85be097f3ddd9f5a5d16f37822b7452fc6f95d67383251b167d7 datapathConfiguration="&{false false false false false }" interface=lxc63efe2b443c0 k8sPodName=openstack/keystone-domain-manage-lt6vp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=401911d1b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2227 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-domain-manage-lt6vp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=401911d1b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2227 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=395d5571-bd46-482a-bed8-7bbfc0e5dbb8,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=395d5571-bd46-482a-bed8-7bbfc0e5dbb8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-domain-manage-lt6vp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=395d5571-bd46-482a-bed8-7bbfc0e5dbb8;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=395d5571-bd46-482a-bed8-7bbfc0e5dbb8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=401911d1b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2227 identity=8313 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=395d5571-bd46-482a-bed8-7bbfc0e5dbb8,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=395d5571-bd46-482a-bed8-7bbfc0e5dbb8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-domain-manage-lt6vp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=401911d1b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2227 identity=8313 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-domain-manage-lt6vp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=401911d1b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2227 identity=8313 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-domain-manage-lt6vp subsys=endpoint level=info msg="Successful endpoint creation" containerID=401911d1b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2227 identity=8313 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-domain-manage-lt6vp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=401911d1b8 endpointID=2227 k8sNamespace=openstack k8sPodName=keystone-domain-manage-lt6vp subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=395d5571-bd46-482a-bed8-7bbfc0e5dbb8 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=395d5571-bd46-482a-bed8-7bbfc0e5dbb8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=401911d1b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2227 identity=8313 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-domain-manage-lt6vp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 3aee43bb-43d9-44b2-915a-a1765a8b9b06 default }" containerID=e7e1d71cf704b4f064e63ae22d4866f17a2cb38696d7a536d0b9cfd5322ae0a9 datapathConfiguration="&{false false false false false }" interface=lxcc85d86d40ed5 k8sPodName=openstack/keystone-bootstrap-kx2j6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7e1d71cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-bootstrap-kx2j6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7e1d71cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8af784d1-1977-448f-8acb-400b0cd4f438,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=8af784d1-1977-448f-8acb-400b0cd4f438,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-bootstrap-kx2j6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8af784d1-1977-448f-8acb-400b0cd4f438;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=8af784d1-1977-448f-8acb-400b0cd4f438;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7e1d71cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=14083 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8af784d1-1977-448f-8acb-400b0cd4f438,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=8af784d1-1977-448f-8acb-400b0cd4f438,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-bootstrap-kx2j6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7e1d71cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=14083 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-bootstrap-kx2j6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7e1d71cf7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=191 identity=14083 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-bootstrap-kx2j6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7e1d71cf7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=191 identity=14083 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-bootstrap-kx2j6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e7e1d71cf7 endpointID=191 k8sNamespace=openstack k8sPodName=keystone-bootstrap-kx2j6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8af784d1-1977-448f-8acb-400b0cd4f438 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=8af784d1-1977-448f-8acb-400b0cd4f438 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e7e1d71cf7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=191 identity=14083 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-bootstrap-kx2j6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 99af27fe-1802-4fe4-8143-2fe6cd7e63d7 default }" containerID=62ae593770c74b01b5a846745e92191bfd16f8ec385ff3023eea86aaf107d934 datapathConfiguration="&{false false false false false }" interface=lxcb04a9efed0e4 k8sPodName=local-path-storage/helper-pod-create-pvc-1be2ba1c-484c-40e7-81e6-03d3b0a38ee9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62ae593770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1be2ba1c-484c-40e7-81e6-03d3b0a38ee9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62ae593770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1be2ba1c-484c-40e7-81e6-03d3b0a38ee9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62ae593770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identity=13251 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1be2ba1c-484c-40e7-81e6-03d3b0a38ee9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62ae593770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identity=13251 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1be2ba1c-484c-40e7-81e6-03d3b0a38ee9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62ae593770 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=41 identity=13251 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1be2ba1c-484c-40e7-81e6-03d3b0a38ee9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=62ae593770 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=41 identity=13251 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1be2ba1c-484c-40e7-81e6-03d3b0a38ee9 subsys=daemon level=info msg="Delete endpoint request" containerID=62ae593770 endpointID=41 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1be2ba1c-484c-40e7-81e6-03d3b0a38ee9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=62ae593770 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=41 identity=13251 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1be2ba1c-484c-40e7-81e6-03d3b0a38ee9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 cc40749e-a567-4481-ace8-bb4b88eae21b default }" containerID=ed6763d1972ae47a628d25052dc691e7e11b2653f05f91aa538ca71290689961 datapathConfiguration="&{false false false false false }" interface=lxc376dcada8f88 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed6763d197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed6763d197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed6763d197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 identity=14270 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed6763d197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 identity=14270 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ed6763d197 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1965 identity=14270 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed6763d197 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1965 identity=14270 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.176 ad4429b5-b768-44d0-8c6e-666d05e1de1e default }" containerID=91ad433939f3a9f4cf2c4829bf40dca793e65f029306d17effcdfa3c7f07fd6c datapathConfiguration="&{false false false false false }" interface=lxc2734477be1e0 k8sPodName=openstack/barbican-api-5c57f8557f-rqhrg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91ad433939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-5c57f8557f-rqhrg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91ad433939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-5c57f8557f-rqhrg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=91ad433939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-5c57f8557f-rqhrg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91ad433939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 identity=24351 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-5c57f8557f-rqhrg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91ad433939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 identity=24351 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-5c57f8557f-rqhrg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 c7628245-7d4b-4352-9364-f47e486e7bea default }" containerID=749d8e63392116c9f453196ef6450e23c705761780e092e0ea828e877564153b datapathConfiguration="&{false false false false false }" interface=lxc3d9763857d75 k8sPodName=openstack/barbican-db-init-bcp8z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=749d8e6339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2975 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-init-bcp8z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=749d8e6339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2975 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5dd3246a-fb28-4beb-92fb-810d83cea258,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=5dd3246a-fb28-4beb-92fb-810d83cea258,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-init-bcp8z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5dd3246a-fb28-4beb-92fb-810d83cea258;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=5dd3246a-fb28-4beb-92fb-810d83cea258;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=749d8e6339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2975 identity=55963 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5dd3246a-fb28-4beb-92fb-810d83cea258,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=5dd3246a-fb28-4beb-92fb-810d83cea258,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-init-bcp8z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=749d8e6339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2975 identity=55963 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-init-bcp8z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=91ad433939 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=248 identity=24351 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-5c57f8557f-rqhrg subsys=endpoint level=info msg="Successful endpoint creation" containerID=91ad433939 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=248 identity=24351 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-api-5c57f8557f-rqhrg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=749d8e6339 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2975 identity=55963 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-init-bcp8z subsys=endpoint level=info msg="Successful endpoint creation" containerID=749d8e6339 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2975 identity=55963 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-init-bcp8z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=749d8e6339 endpointID=2975 k8sNamespace=openstack k8sPodName=barbican-db-init-bcp8z subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5dd3246a-fb28-4beb-92fb-810d83cea258 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=5dd3246a-fb28-4beb-92fb-810d83cea258 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=749d8e6339 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2975 identity=55963 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-init-bcp8z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 843a0192-403d-40b0-aed4-3589abdca932 default }" containerID=6f344b6f61081b84afc61ae31efbeb03b77c6a221d3e5460b9b6be9a8d8651cb datapathConfiguration="&{false false false false false }" interface=lxc2f3541f838c1 k8sPodName=openstack/barbican-db-sync-4vhl4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f344b6f61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2102 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-db-sync-4vhl4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f344b6f61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2102 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=236e2eb3-fd56-40f8-b70c-4f906d6a045f,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=236e2eb3-fd56-40f8-b70c-4f906d6a045f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-db-sync-4vhl4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=236e2eb3-fd56-40f8-b70c-4f906d6a045f;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=236e2eb3-fd56-40f8-b70c-4f906d6a045f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f344b6f61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2102 identity=21258 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=236e2eb3-fd56-40f8-b70c-4f906d6a045f,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=236e2eb3-fd56-40f8-b70c-4f906d6a045f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-db-sync-4vhl4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f344b6f61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2102 identity=21258 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-db-sync-4vhl4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6f344b6f61 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2102 identity=21258 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-db-sync-4vhl4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f344b6f61 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2102 identity=21258 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-db-sync-4vhl4 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03582250057489145 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=6f344b6f61 endpointID=2102 k8sNamespace=openstack k8sPodName=barbican-db-sync-4vhl4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=236e2eb3-fd56-40f8-b70c-4f906d6a045f k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=236e2eb3-fd56-40f8-b70c-4f906d6a045f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6f344b6f61 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2102 identity=21258 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-db-sync-4vhl4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 c4649ad8-281e-4566-aab8-e06e431c44c2 default }" containerID=fd3f6989ff17218bf85c01495176e1f227c18f62fcbe4e259afc58d595871589 datapathConfiguration="&{false false false false false }" interface=lxcf8d2f60b1646 k8sPodName=openstack/barbican-rabbit-init-fb7w5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd3f6989ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/barbican-rabbit-init-fb7w5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd3f6989ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2fb673a8-2f5c-4bbe-ae72-587fd8bd988c,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2fb673a8-2f5c-4bbe-ae72-587fd8bd988c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/barbican-rabbit-init-fb7w5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fd3f6989ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.85 ipv6= k8sPodName=openstack/barbican-rabbit-init-fb7w5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2fb673a8-2f5c-4bbe-ae72-587fd8bd988c;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2fb673a8-2f5c-4bbe-ae72-587fd8bd988c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd3f6989ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identity=16421 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2fb673a8-2f5c-4bbe-ae72-587fd8bd988c,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2fb673a8-2f5c-4bbe-ae72-587fd8bd988c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/barbican-rabbit-init-fb7w5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd3f6989ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identity=16421 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/barbican-rabbit-init-fb7w5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd3f6989ff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2360 identity=16421 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/barbican-rabbit-init-fb7w5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd3f6989ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2360 identity=16421 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/barbican-rabbit-init-fb7w5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fd3f6989ff endpointID=2360 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-fb7w5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2fb673a8-2f5c-4bbe-ae72-587fd8bd988c k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2fb673a8-2f5c-4bbe-ae72-587fd8bd988c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fd3f6989ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2360 identity=16421 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/barbican-rabbit-init-fb7w5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 83736642-dc1b-4035-90b4-0533d8a6f238 default }" containerID=bfc66634b045299d6cbb69db9f747c25b07ff3a29e21204afa0e92f51a289027 datapathConfiguration="&{false false false false false }" interface=lxc395d53c50db7 k8sPodName=openstack/barbican-ks-service-rmb5d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfc66634b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2237 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-ks-service-rmb5d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfc66634b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2237 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=19856295-fe60-4aad-b54d-ab7ff78cca38,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=19856295-fe60-4aad-b54d-ab7ff78cca38,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-ks-service-rmb5d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=19856295-fe60-4aad-b54d-ab7ff78cca38;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=19856295-fe60-4aad-b54d-ab7ff78cca38;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfc66634b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2237 identity=1647 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=19856295-fe60-4aad-b54d-ab7ff78cca38,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=19856295-fe60-4aad-b54d-ab7ff78cca38,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-ks-service-rmb5d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bfc66634b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2237 identity=1647 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-ks-service-rmb5d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bfc66634b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2237 identity=1647 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-ks-service-rmb5d subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfc66634b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2237 identity=1647 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-ks-service-rmb5d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bfc66634b0 endpointID=2237 k8sNamespace=openstack k8sPodName=barbican-ks-service-rmb5d subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=19856295-fe60-4aad-b54d-ab7ff78cca38 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=19856295-fe60-4aad-b54d-ab7ff78cca38 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=bfc66634b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2237 identity=1647 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-ks-service-rmb5d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 502f5f34-ba2c-44b2-bde2-c541d53c394e default }" containerID=21e42a5ecab1e33294a6079d844d39f2386628f0e0db25ca07ecb0f2856c76ed datapathConfiguration="&{false false false false false }" interface=lxcaadf5e722134 k8sPodName=openstack/barbican-ks-endpoints-26jlv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21e42a5eca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-26jlv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21e42a5eca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9e4dc7ec-70c8-48a2-aca9-db6b48515d91,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9e4dc7ec-70c8-48a2-aca9-db6b48515d91,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-26jlv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9e4dc7ec-70c8-48a2-aca9-db6b48515d91;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=9e4dc7ec-70c8-48a2-aca9-db6b48515d91;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21e42a5eca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identity=2284 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9e4dc7ec-70c8-48a2-aca9-db6b48515d91,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9e4dc7ec-70c8-48a2-aca9-db6b48515d91,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-26jlv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=21e42a5eca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identity=2284 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-26jlv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=21e42a5eca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=174 identity=2284 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-26jlv subsys=endpoint level=info msg="Successful endpoint creation" containerID=21e42a5eca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=174 identity=2284 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-26jlv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=21e42a5eca endpointID=174 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-26jlv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9e4dc7ec-70c8-48a2-aca9-db6b48515d91 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=9e4dc7ec-70c8-48a2-aca9-db6b48515d91 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=21e42a5eca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=174 identity=2284 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-26jlv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 f86d6a11-8f71-4115-963d-d0084f678c6b default }" containerID=87dd843c1d4fcbca07478d2b17f6972d3e0853e8f02232eab7df13fad1cb2181 datapathConfiguration="&{false false false false false }" interface=lxcd3d800898ac5 k8sPodName=openstack/barbican-ks-user-srnx6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87dd843c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2938 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-user-srnx6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87dd843c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2938 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=16fa95fd-b6ec-4c38-b2ea-49a407040908,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=16fa95fd-b6ec-4c38-b2ea-49a407040908,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-user-srnx6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=16fa95fd-b6ec-4c38-b2ea-49a407040908;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=16fa95fd-b6ec-4c38-b2ea-49a407040908;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87dd843c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2938 identity=64213 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=16fa95fd-b6ec-4c38-b2ea-49a407040908,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=16fa95fd-b6ec-4c38-b2ea-49a407040908,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-user-srnx6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87dd843c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2938 identity=64213 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-user-srnx6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=87dd843c1d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2938 identity=64213 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-user-srnx6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=87dd843c1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2938 identity=64213 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-user-srnx6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=87dd843c1d endpointID=2938 k8sNamespace=openstack k8sPodName=barbican-ks-user-srnx6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=16fa95fd-b6ec-4c38-b2ea-49a407040908 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=16fa95fd-b6ec-4c38-b2ea-49a407040908 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=87dd843c1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2938 identity=64213 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-user-srnx6 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.163 62b79a47-dc9b-4aa5-97ba-eb7b9b596b20 default }" containerID=7ada4135bbca83a735b35646575d25fc0a4e07639fc2cdeaa570301b8ddaa0f6 datapathConfiguration="&{false false false false false }" interface=lxcd62cdbe9488e k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bm8cf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ada4135bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 ipv4=10.0.0.163 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bm8cf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ada4135bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.163 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bm8cf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7ada4135bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=10810 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.163 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bm8cf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ada4135bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=10810 ipv4=10.0.0.163 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bm8cf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ada4135bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1479 identity=10810 ipv4=10.0.0.163 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bm8cf subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ada4135bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1479 identity=10810 ipv4=10.0.0.163 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bm8cf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.193 21b3da13-f6e8-4007-86f1-aad793578ead default }" containerID=51d36eb94ae5ed43ac3b72a2dabc31238cd174dba9b0d5c92604680a62fc52ee datapathConfiguration="&{false false false false false }" interface=lxc5370edbd2612 k8sPodName=openstack/rook-ceph-detect-version-2r2m9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51d36eb94a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2r2m9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51d36eb94a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=38f77ba9-43e9-4901-a5ad-11b9664f4c94,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=38f77ba9-43e9-4901-a5ad-11b9664f4c94,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2r2m9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=38f77ba9-43e9-4901-a5ad-11b9664f4c94;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=38f77ba9-43e9-4901-a5ad-11b9664f4c94;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51d36eb94a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 identity=33474 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=38f77ba9-43e9-4901-a5ad-11b9664f4c94,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=38f77ba9-43e9-4901-a5ad-11b9664f4c94,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2r2m9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51d36eb94a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 identity=33474 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2r2m9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=51d36eb94a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=161 identity=33474 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2r2m9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=51d36eb94a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=161 identity=33474 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2r2m9 subsys=daemon level=info msg="Delete endpoint request" containerID=51d36eb94a endpointID=161 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-2r2m9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=38f77ba9-43e9-4901-a5ad-11b9664f4c94 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=38f77ba9-43e9-4901-a5ad-11b9664f4c94 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=51d36eb94a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=161 identity=33474 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2r2m9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 a6287977-05be-4502-a507-840097752419 default }" containerID=209f8bfcb7f890825172b004dc9c00b72c03deaeca44fcca8eb2d30a30ef4b62 datapathConfiguration="&{false false false false false }" interface=lxc5303e392b022 k8sPodName=openstack/ceph-object-controller-detect-version-67fft labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=209f8bfcb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2666 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-67fft subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=209f8bfcb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2666 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=5a1ae420-863f-4393-b625-a20cef3b4203,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=5a1ae420-863f-4393-b625-a20cef3b4203,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-67fft subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=5a1ae420-863f-4393-b625-a20cef3b4203;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=5a1ae420-863f-4393-b625-a20cef3b4203;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=209f8bfcb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2666 identity=1589 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=5a1ae420-863f-4393-b625-a20cef3b4203,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=5a1ae420-863f-4393-b625-a20cef3b4203,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-67fft oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=209f8bfcb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2666 identity=1589 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-67fft subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=209f8bfcb7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2666 identity=1589 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-67fft subsys=endpoint level=info msg="Successful endpoint creation" containerID=209f8bfcb7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2666 identity=1589 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-67fft subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=209f8bfcb7 endpointID=2666 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-67fft subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=5a1ae420-863f-4393-b625-a20cef3b4203 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=5a1ae420-863f-4393-b625-a20cef3b4203 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=209f8bfcb7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2666 identity=1589 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-67fft subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 8019c7c7-4e40-4128-b054-bcabdf8970c7 default }" containerID=ddc7b0e16ebad61ca1da4b350b2fc83386c28d785951574c1b5c1bd8eca88c7a datapathConfiguration="&{false false false false false }" interface=lxcb8c4d43ecc6a k8sPodName=local-path-storage/helper-pod-create-pvc-00f18bcc-07a6-434c-a167-be89c538b55e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ddc7b0e16e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=828 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00f18bcc-07a6-434c-a167-be89c538b55e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ddc7b0e16e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=828 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00f18bcc-07a6-434c-a167-be89c538b55e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ddc7b0e16e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=828 identity=13251 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00f18bcc-07a6-434c-a167-be89c538b55e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ddc7b0e16e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=828 identity=13251 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00f18bcc-07a6-434c-a167-be89c538b55e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ddc7b0e16e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=828 identity=13251 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00f18bcc-07a6-434c-a167-be89c538b55e subsys=endpoint level=info msg="Successful endpoint creation" containerID=ddc7b0e16e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=828 identity=13251 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00f18bcc-07a6-434c-a167-be89c538b55e subsys=daemon level=info msg="Delete endpoint request" containerID=ddc7b0e16e endpointID=828 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-00f18bcc-07a6-434c-a167-be89c538b55e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ddc7b0e16e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=828 identity=13251 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00f18bcc-07a6-434c-a167-be89c538b55e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 5b7bd299-c03a-488a-8e5c-024375ac00d7 default }" containerID=d02afd09d15cb4a9248f9643bef250f9d5a0dd5eade8afded0930891b5932f5b datapathConfiguration="&{false false false false false }" interface=lxc50902601d3a1 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d02afd09d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d02afd09d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d02afd09d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=9337 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d02afd09d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=9337 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d02afd09d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=279 identity=9337 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d02afd09d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=279 identity=9337 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.237 edb7ba66-1345-4014-aae4-dbb307d9dd64 default }" containerID=72a885bd8222fef7152d25c1a4755ae454683be3ffe0e0ecc3b94b5def7d5fa1 datapathConfiguration="&{false false false false false }" interface=lxc8bf978bb5bbb k8sPodName=openstack/glance-db-init-dq9sn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72a885bd82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/glance-db-init-dq9sn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72a885bd82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=24c04ef5-5e77-4e8b-86bc-1b23aa918126,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=24c04ef5-5e77-4e8b-86bc-1b23aa918126,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/glance-db-init-dq9sn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=24c04ef5-5e77-4e8b-86bc-1b23aa918126;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=24c04ef5-5e77-4e8b-86bc-1b23aa918126;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72a885bd82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identity=55082 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=24c04ef5-5e77-4e8b-86bc-1b23aa918126,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=24c04ef5-5e77-4e8b-86bc-1b23aa918126,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/glance-db-init-dq9sn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72a885bd82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identity=55082 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/glance-db-init-dq9sn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=72a885bd82 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=812 identity=55082 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/glance-db-init-dq9sn subsys=endpoint level=info msg="Successful endpoint creation" containerID=72a885bd82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=812 identity=55082 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/glance-db-init-dq9sn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=72a885bd82 endpointID=812 k8sNamespace=openstack k8sPodName=glance-db-init-dq9sn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=24c04ef5-5e77-4e8b-86bc-1b23aa918126 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=24c04ef5-5e77-4e8b-86bc-1b23aa918126 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=72a885bd82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=812 identity=55082 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/glance-db-init-dq9sn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 eec3f8b3-515d-4265-9ee0-03f3f5b03ba3 default }" containerID=e9fc6adcd4f41d63012e32b71c4ab9469642e86095a1654ee58dfed86c542f9a datapathConfiguration="&{false false false false false }" interface=lxc8591c87e9f8d k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w6bnj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9fc6adcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w6bnj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9fc6adcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w6bnj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e9fc6adcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w6bnj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9fc6adcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 identity=33159 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w6bnj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9fc6adcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3941 identity=33159 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w6bnj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 7e3c4873-e690-432d-9fe3-4b3f0ea18fd7 default }" containerID=13de21fafdee7b2811e59d559735cb74c6fec7b35c462607c4022e3540616abf datapathConfiguration="&{false false false false false }" interface=lxcf501f704cacc k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zs8xg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13de21fafd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3744 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zs8xg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13de21fafd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3744 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zs8xg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13de21fafd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3744 identity=26845 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zs8xg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13de21fafd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3744 identity=26845 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zs8xg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9fc6adcd4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3941 identity=33159 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w6bnj subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9fc6adcd4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3941 identity=33159 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w6bnj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=13de21fafd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3744 identity=26845 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zs8xg subsys=endpoint level=info msg="Successful endpoint creation" containerID=13de21fafd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3744 identity=26845 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zs8xg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.227 1dc78364-acb9-4b80-abdf-36f2ba1b4e98 default }" containerID=ca2d9e3b19ec93ed13455773ecae8815234d372d59c42057654532e71621d9d3 datapathConfiguration="&{false false false false false }" interface=lxcf5abac55f589 k8sPodName=openstack/glance-db-sync-kthzm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca2d9e3b19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-db-sync-kthzm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca2d9e3b19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6e2bd65d-56f4-41da-b021-51c867ce0e6b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=6e2bd65d-56f4-41da-b021-51c867ce0e6b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-db-sync-kthzm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6e2bd65d-56f4-41da-b021-51c867ce0e6b;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=6e2bd65d-56f4-41da-b021-51c867ce0e6b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca2d9e3b19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identity=25387 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6e2bd65d-56f4-41da-b021-51c867ce0e6b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=6e2bd65d-56f4-41da-b021-51c867ce0e6b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-db-sync-kthzm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca2d9e3b19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identity=25387 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-db-sync-kthzm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca2d9e3b19 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=9 identity=25387 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-db-sync-kthzm subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca2d9e3b19 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=9 identity=25387 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-db-sync-kthzm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ca2d9e3b19 endpointID=9 k8sNamespace=openstack k8sPodName=glance-db-sync-kthzm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6e2bd65d-56f4-41da-b021-51c867ce0e6b k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=6e2bd65d-56f4-41da-b021-51c867ce0e6b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ca2d9e3b19 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=9 identity=25387 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-db-sync-kthzm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 129d9f23-1fa4-4666-a3be-07463c05c40b default }" containerID=f712bdb2333c0c3757556f0bca8f132b18fe08a3a63244f12f2688dac44f47ba datapathConfiguration="&{false false false false false }" interface=lxc68f4f5256ef6 k8sPodName=openstack/glance-rabbit-init-8v7k2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f712bdb233 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-rabbit-init-8v7k2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f712bdb233 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7c000152-53a9-4e06-9e69-d2ca3a7cfc8a,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7c000152-53a9-4e06-9e69-d2ca3a7cfc8a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-rabbit-init-8v7k2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7c000152-53a9-4e06-9e69-d2ca3a7cfc8a;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=7c000152-53a9-4e06-9e69-d2ca3a7cfc8a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f712bdb233 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 identity=52950 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7c000152-53a9-4e06-9e69-d2ca3a7cfc8a,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7c000152-53a9-4e06-9e69-d2ca3a7cfc8a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-rabbit-init-8v7k2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f712bdb233 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 identity=52950 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-rabbit-init-8v7k2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f712bdb233 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3361 identity=52950 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-rabbit-init-8v7k2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f712bdb233 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3361 identity=52950 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-rabbit-init-8v7k2 subsys=daemon level=info msg="Delete endpoint request" containerID=f712bdb233 endpointID=3361 k8sNamespace=openstack k8sPodName=glance-rabbit-init-8v7k2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7c000152-53a9-4e06-9e69-d2ca3a7cfc8a k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=7c000152-53a9-4e06-9e69-d2ca3a7cfc8a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f712bdb233 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3361 identity=52950 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-rabbit-init-8v7k2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 b3838d10-a78e-4dc2-b674-1f3bdc0469cb default }" containerID=004e910ca8ed47de335f1cc779025027784bb47b7898c7069b80d790b06ec10a datapathConfiguration="&{false false false false false }" interface=lxc2147918f05f2 k8sPodName=openstack/glance-ks-service-k887w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=004e910ca8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-ks-service-k887w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=004e910ca8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c3e2ccb4-e6d6-407b-9ade-9c04cfd53ac0,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=c3e2ccb4-e6d6-407b-9ade-9c04cfd53ac0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-ks-service-k887w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c3e2ccb4-e6d6-407b-9ade-9c04cfd53ac0;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=c3e2ccb4-e6d6-407b-9ade-9c04cfd53ac0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=004e910ca8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identity=34408 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c3e2ccb4-e6d6-407b-9ade-9c04cfd53ac0,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=c3e2ccb4-e6d6-407b-9ade-9c04cfd53ac0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-ks-service-k887w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=004e910ca8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identity=34408 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-ks-service-k887w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=004e910ca8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=213 identity=34408 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-ks-service-k887w subsys=endpoint level=info msg="Successful endpoint creation" containerID=004e910ca8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=213 identity=34408 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-ks-service-k887w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=004e910ca8 endpointID=213 k8sNamespace=openstack k8sPodName=glance-ks-service-k887w subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c3e2ccb4-e6d6-407b-9ade-9c04cfd53ac0 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=c3e2ccb4-e6d6-407b-9ade-9c04cfd53ac0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=004e910ca8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=213 identity=34408 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-ks-service-k887w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 95f0c99c-69ff-4983-9465-a7325e1f99b3 default }" containerID=e1dea26b503f4dabd66faadc3e5f83bf65c1e2535cba0360827c6281832f643e datapathConfiguration="&{false false false false false }" interface=lxc1a43f281b2be k8sPodName=openstack/glance-ks-endpoints-8xkz2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1dea26b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3574 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-ks-endpoints-8xkz2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1dea26b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3574 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=248a6375-deed-462a-bbdd-32621cd97549,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=248a6375-deed-462a-bbdd-32621cd97549,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-ks-endpoints-8xkz2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=248a6375-deed-462a-bbdd-32621cd97549;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=248a6375-deed-462a-bbdd-32621cd97549;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1dea26b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3574 identity=30685 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=248a6375-deed-462a-bbdd-32621cd97549,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=248a6375-deed-462a-bbdd-32621cd97549,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-ks-endpoints-8xkz2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1dea26b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3574 identity=30685 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-ks-endpoints-8xkz2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e1dea26b50 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3574 identity=30685 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-ks-endpoints-8xkz2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1dea26b50 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3574 identity=30685 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-ks-endpoints-8xkz2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e1dea26b50 endpointID=3574 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-8xkz2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=248a6375-deed-462a-bbdd-32621cd97549 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=248a6375-deed-462a-bbdd-32621cd97549 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e1dea26b50 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3574 identity=30685 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-ks-endpoints-8xkz2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 2b9edd80-b7bf-43b8-b23c-db3b8f3e724a default }" containerID=12d93ac8445bc8c065ac953de1cc3a27fd10555b158e7f4c7dbc02b559a4734b datapathConfiguration="&{false false false false false }" interface=lxcdc30f5dbba26 k8sPodName=openstack/glance-ks-user-q8k4d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12d93ac844 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=840 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/glance-ks-user-q8k4d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12d93ac844 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=840 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1e13eebb-b23c-4da5-ba30-e3a839265028,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=1e13eebb-b23c-4da5-ba30-e3a839265028,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/glance-ks-user-q8k4d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1e13eebb-b23c-4da5-ba30-e3a839265028;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=1e13eebb-b23c-4da5-ba30-e3a839265028;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12d93ac844 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=840 identity=10777 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1e13eebb-b23c-4da5-ba30-e3a839265028,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=1e13eebb-b23c-4da5-ba30-e3a839265028,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/glance-ks-user-q8k4d oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=12d93ac844 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=840 identity=10777 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/glance-ks-user-q8k4d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=12d93ac844 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=840 identity=10777 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/glance-ks-user-q8k4d subsys=endpoint level=info msg="Successful endpoint creation" containerID=12d93ac844 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=840 identity=10777 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/glance-ks-user-q8k4d subsys=daemon level=info msg="Delete endpoint request" containerID=12d93ac844 endpointID=840 k8sNamespace=openstack k8sPodName=glance-ks-user-q8k4d subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1e13eebb-b23c-4da5-ba30-e3a839265028 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=1e13eebb-b23c-4da5-ba30-e3a839265028 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=12d93ac844 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=840 identity=10777 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/glance-ks-user-q8k4d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 91e444a8-7215-4f46-aa5a-40e3c928e314 default }" containerID=20c49b699db41a45d6bd2d6c8c2e83fbc262aa2b0f4aa79ce8d4e713a84275cf datapathConfiguration="&{false false false false false }" interface=lxc8ca3975b4f15 k8sPodName=openstack/glance-metadefs-load-4ln6j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20c49b699d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-metadefs-load-4ln6j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20c49b699d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fbd5965d-2d4f-4998-8ed6-531422e97dca,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=fbd5965d-2d4f-4998-8ed6-531422e97dca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-metadefs-load-4ln6j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fbd5965d-2d4f-4998-8ed6-531422e97dca;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=fbd5965d-2d4f-4998-8ed6-531422e97dca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20c49b699d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identity=22346 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fbd5965d-2d4f-4998-8ed6-531422e97dca,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=fbd5965d-2d4f-4998-8ed6-531422e97dca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-metadefs-load-4ln6j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20c49b699d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identity=22346 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-metadefs-load-4ln6j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=20c49b699d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=889 identity=22346 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-metadefs-load-4ln6j subsys=endpoint level=info msg="Successful endpoint creation" containerID=20c49b699d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=889 identity=22346 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-metadefs-load-4ln6j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=20c49b699d endpointID=889 k8sNamespace=openstack k8sPodName=glance-metadefs-load-4ln6j subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fbd5965d-2d4f-4998-8ed6-531422e97dca k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=fbd5965d-2d4f-4998-8ed6-531422e97dca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=20c49b699d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=889 identity=22346 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-metadefs-load-4ln6j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 e85d8ede-6443-4a93-b522-a3c9bbf5cc7f default }" containerID=7d1d55860e056c52b4cd3267b63132c428ade3a666a08c84e6ec78318d855343 datapathConfiguration="&{false false false false false }" interface=lxc5f7ff9e9819d k8sPodName=openstack/glance-storage-init-rc54s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d1d55860e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3670 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-storage-init-rc54s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d1d55860e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3670 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=aa267e50-ff4c-4790-b59a-28c2283b5669,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=aa267e50-ff4c-4790-b59a-28c2283b5669,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-storage-init-rc54s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=aa267e50-ff4c-4790-b59a-28c2283b5669;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=aa267e50-ff4c-4790-b59a-28c2283b5669;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7d1d55860e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3670 identity=38178 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=aa267e50-ff4c-4790-b59a-28c2283b5669,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=aa267e50-ff4c-4790-b59a-28c2283b5669,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-storage-init-rc54s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d1d55860e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3670 identity=38178 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-storage-init-rc54s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d1d55860e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3670 identity=38178 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-storage-init-rc54s subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d1d55860e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3670 identity=38178 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-storage-init-rc54s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7d1d55860e endpointID=3670 k8sNamespace=openstack k8sPodName=glance-storage-init-rc54s subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=aa267e50-ff4c-4790-b59a-28c2283b5669 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=aa267e50-ff4c-4790-b59a-28c2283b5669 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7d1d55860e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3670 identity=38178 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-storage-init-rc54s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 07401f8c-0f03-4a1b-ba97-30408c2eedbd default }" containerID=2efa84bebc820326930312d51cd1e37b0a44ae5c9112fc9e13116cb9d1ffda81 datapathConfiguration="&{false false false false false }" interface=lxc38528b2ae4d6 k8sPodName=openstack/glance-api-654f98c95f-lpk5r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2efa84bebc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2440 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/glance-api-654f98c95f-lpk5r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2efa84bebc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2440 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/glance-api-654f98c95f-lpk5r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2efa84bebc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2440 identity=11184 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/glance-api-654f98c95f-lpk5r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2efa84bebc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2440 identity=11184 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/glance-api-654f98c95f-lpk5r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2efa84bebc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2440 identity=11184 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/glance-api-654f98c95f-lpk5r subsys=endpoint level=info msg="Successful endpoint creation" containerID=2efa84bebc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2440 identity=11184 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/glance-api-654f98c95f-lpk5r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.123 2e2878ac-0a73-4eb7-9f9b-f3006cd6157e default }" containerID=81f58f5d42c1ce3432c7c1d94639f54521403b9ad7b1af8d42f8aabbe88a70bd datapathConfiguration="&{false false false false false }" interface=lxc1c40b48b471c k8sPodName=openstack/staffeln-conductor-6458f58df9-fd5nr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81f58f5d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-conductor-6458f58df9-fd5nr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81f58f5d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-conductor-6458f58df9-fd5nr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.232 8c4909f0-6f86-4a7d-8a08-b8eab5becd38 default }" containerID=f60c00d9b964dc230c39a62add710d9fe22b9a963bdb02a173cb73ba46ca520b datapathConfiguration="&{false false false false false }" interface=lxc444e578843bb k8sPodName=openstack/staffeln-api-58fb4d458d-cs56m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f60c00d9b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3258 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-api-58fb4d458d-cs56m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f60c00d9b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3258 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-api-58fb4d458d-cs56m subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81f58f5d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=44141 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-conductor-6458f58df9-fd5nr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81f58f5d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=44141 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-conductor-6458f58df9-fd5nr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f60c00d9b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3258 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-api-58fb4d458d-cs56m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f60c00d9b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3258 identity=21971 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-api-58fb4d458d-cs56m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f60c00d9b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3258 identity=21971 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-api-58fb4d458d-cs56m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 cb7e6444-8d30-49ad-b3b0-db4a2d24ba52 default }" containerID=ec8d00f492b93817b177a09c92f5d83a8154e9d472d0d90d7462b6b8cff0e4fb datapathConfiguration="&{false false false false false }" interface=lxc18eda2eebd0f k8sPodName=openstack/staffeln-db-init-ddxsf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec8d00f492 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/staffeln-db-init-ddxsf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec8d00f492 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c853d71d-b5fb-4838-a28d-244ddc3f1dfe,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=c853d71d-b5fb-4838-a28d-244ddc3f1dfe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/staffeln-db-init-ddxsf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=c853d71d-b5fb-4838-a28d-244ddc3f1dfe;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=c853d71d-b5fb-4838-a28d-244ddc3f1dfe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec8d00f492 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 identity=12078 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c853d71d-b5fb-4838-a28d-244ddc3f1dfe,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=c853d71d-b5fb-4838-a28d-244ddc3f1dfe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/staffeln-db-init-ddxsf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec8d00f492 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 identity=12078 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/staffeln-db-init-ddxsf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f60c00d9b9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3258 identity=21971 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-api-58fb4d458d-cs56m subsys=endpoint level=info msg="Successful endpoint creation" containerID=f60c00d9b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3258 identity=21971 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-api-58fb4d458d-cs56m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=81f58f5d42 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=60 identity=44141 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-conductor-6458f58df9-fd5nr subsys=endpoint level=info msg="Successful endpoint creation" containerID=81f58f5d42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=60 identity=44141 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-conductor-6458f58df9-fd5nr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ec8d00f492 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3377 identity=12078 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/staffeln-db-init-ddxsf subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec8d00f492 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3377 identity=12078 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/staffeln-db-init-ddxsf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ec8d00f492 endpointID=3377 k8sNamespace=openstack k8sPodName=staffeln-db-init-ddxsf subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=c853d71d-b5fb-4838-a28d-244ddc3f1dfe k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=c853d71d-b5fb-4838-a28d-244ddc3f1dfe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=ec8d00f492 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3377 identity=12078 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/staffeln-db-init-ddxsf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 207a69b4-8a0e-4ba0-8742-a2fff24df78c default }" containerID=b053f2420793bd6480bc4ca9869e916a197b8e9cc5dba207820f230b626ab28a datapathConfiguration="&{false false false false false }" interface=lxc90b5137e35a5 k8sPodName=openstack/staffeln-db-sync-l6cjt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b053f24207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1275 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-db-sync-l6cjt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b053f24207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1275 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=62ababdf-2006-475f-863d-a9f03979adec,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=62ababdf-2006-475f-863d-a9f03979adec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-db-sync-l6cjt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b053f24207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1275 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-db-sync-l6cjt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=62ababdf-2006-475f-863d-a9f03979adec;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=62ababdf-2006-475f-863d-a9f03979adec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b053f24207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1275 identity=24869 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=62ababdf-2006-475f-863d-a9f03979adec,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=62ababdf-2006-475f-863d-a9f03979adec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-db-sync-l6cjt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b053f24207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1275 identity=24869 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-db-sync-l6cjt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b053f24207 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1275 identity=24869 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-db-sync-l6cjt subsys=endpoint level=info msg="Successful endpoint creation" containerID=b053f24207 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1275 identity=24869 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-db-sync-l6cjt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager