level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="759.474µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="39.911µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="722.434µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=91.028097ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.39µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="13.62µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="52.551µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="56.831µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="60.891µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="641.353µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.52µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.939052ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.040599ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="37.321µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="36.111µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="199.944µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="98.192µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="57.321µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=46.801528ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="143.892µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.78µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.92µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.119.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.295066ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="10.531µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.533015ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.812339ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="7.75µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.95µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.83µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.23µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="21.08µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="15.68µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="33.03µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="376.127µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.19µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.72µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="234.994µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="809.184µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.196862ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.98µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="16.84µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.119 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.119 ipAddr.ipv6="" k8sNodeIP=199.19.213.119 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.119" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.95" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.119" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.119} {CiliumInternalIP 10.0.0.95}] 10.0.0.0/24 [] [] 10.0.0.174 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:42679" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.402058183s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="266.835µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="18.031µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="49.63µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="17.03µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3672 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3672 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3672 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.339626852s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=300.812769ms file-path=/var/run/cilium/state/templates/c6fd1594225b2d7f0fae03cc9efdb9a81a74352ccd7e2161453805d1a8025e5e/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3672 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3707 ipv4=10.0.0.174 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3707 identityLabels="reserved:health" ipv4=10.0.0.174 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3707 identity=4 identityLabels="reserved:health" ipv4=10.0.0.174 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.071175159s file-path=/var/run/cilium/state/templates/3b89aa1fa3d9da40c3f3e3ea2cbab1b4e27724c8690d73b8ba1a144d027999ad/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3707 identity=4 ipv4=10.0.0.174 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 a3b22889-0941-4051-8b93-5009742bb49e default }" containerID=5fff6f76644f2447086a57002b310f8e30e9fe668e5847ad2a8fb224d82cb5b0 datapathConfiguration="&{false false false false false }" interface=lxc46716e361aa7 k8sPodName=kube-system/coredns-7c96b6546b-bbjjb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5fff6f7664 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bbjjb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5fff6f7664 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bbjjb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5fff6f7664 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identity=36537 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bbjjb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5fff6f7664 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identity=36537 ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bbjjb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5fff6f7664 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=913 identity=36537 ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bbjjb subsys=endpoint level=info msg="Successful endpoint creation" containerID=5fff6f7664 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=913 identity=36537 ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bbjjb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.159 b35cffbb-ffe9-4472-8030-5c033f2d1c52 default }" containerID=0e280de34519d43ea30dc11401f8dccf0e5b0471726c16488f9a83b6ac0c26c2 datapathConfiguration="&{false false false false false }" interface=lxcf8d6c2ebe920 k8sPodName=cert-manager/cert-manager-75c4c745bc-wtgj4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e280de345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wtgj4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e280de345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wtgj4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e280de345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 identity=43741 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wtgj4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e280de345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 identity=43741 ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wtgj4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 9a89138c-d41f-4ed8-9492-8252a3e90bd4 default }" containerID=fe3ace33ef401ad507555ba78f2267ca1e5961ad17db4412f964a4481b7f027b datapathConfiguration="&{false false false false false }" interface=lxcbcbc2f879d9b k8sPodName=kube-system/coredns-67659f764b-4pqvq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe3ace33ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 ipv4=10.0.0.195 ipv6= k8sPodName=kube-system/coredns-67659f764b-4pqvq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 f6a94c60-a204-4584-a567-6137cbcafacb default }" containerID=6ca2eea55589174cd60d769f81964a593f6071ac1203f67736cfacac53917c02 datapathConfiguration="&{false false false false false }" interface=lxc24319190e81f k8sPodName=cert-manager/cert-manager-startupapicheck-54tzs labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=fe3ace33ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.195 ipv6= k8sPodName=kube-system/coredns-67659f764b-4pqvq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 8471b488-2aa1-401e-931b-e9757c020768 default }" containerID=f67b5de99247ab10ebd15d61d0dde10c57db5de25adfc6377eb78d5840945e47 datapathConfiguration="&{false false false false false }" interface=lxcba1846100657 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pwhgb labels="[]" subsys=daemon sync-build=true level=info msg="Identity of endpoint changed" containerID=fe3ace33ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 identity=36537 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.195 ipv6= k8sPodName=kube-system/coredns-67659f764b-4pqvq oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 c12efbc0-56bd-4550-8372-c6fa6cb1bc00 default }" containerID=05ed244240f3d185f59f283cc5e61385b28dc778e447988ad73db54d4aea9331 datapathConfiguration="&{false false false false false }" interface=lxc28e4fe82a7af k8sPodName=local-path-storage/local-path-provisioner-679c578f5-bnmq4 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.215 89c29dc1-ceb8-4ba5-b228-8a7974658122 default }" containerID=485300404cba1f53016d8c19bf915c9c2f85b76336dd4388458d45cb53b1e219 datapathConfiguration="&{false false false false false }" interface=lxc72e4f1d50813 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-846r8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ca2eea555 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 ipv4=10.0.0.211 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-54tzs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 2bb3a370-fe30-46d7-8a0c-25c8419cb4e2 default }" containerID=929d121791986e7ba14b004b81fafc1a2515cbaf000d540119b9078a6990f9a1 datapathConfiguration="&{false false false false false }" interface=lxcf5155581dc30 k8sPodName=kube-system/coredns-67659f764b-flxrn labels="[]" subsys=daemon sync-build=true level=info msg="Waiting for endpoint to be generated" containerID=fe3ace33ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 identity=36537 ipv4=10.0.0.195 ipv6= k8sPodName=kube-system/coredns-67659f764b-4pqvq subsys=endpoint level=info msg="New endpoint" containerID=485300404c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 ipv4=10.0.0.215 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-846r8 subsys=endpoint level=info msg="New endpoint" containerID=f67b5de992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pwhgb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ca2eea555 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c3ba0223-1d53-4329-ad24-db9433fcc38f,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c3ba0223-1d53-4329-ad24-db9433fcc38f,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.211 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-54tzs subsys=endpoint level=info msg="New endpoint" containerID=05ed244240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=72 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-bnmq4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=929d121791 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 ipv4=10.0.0.135 ipv6= k8sPodName=kube-system/coredns-67659f764b-flxrn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05ed244240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=72 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-bnmq4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=485300404c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.215 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-846r8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f67b5de992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pwhgb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=929d121791 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.135 ipv6= k8sPodName=kube-system/coredns-67659f764b-flxrn subsys=endpoint level=info msg="Identity of endpoint changed" containerID=929d121791 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identity=36537 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.135 ipv6= k8sPodName=kube-system/coredns-67659f764b-flxrn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=929d121791 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identity=36537 ipv4=10.0.0.135 ipv6= k8sPodName=kube-system/coredns-67659f764b-flxrn subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=c3ba0223-1d53-4329-ad24-db9433fcc38f;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=c3ba0223-1d53-4329-ad24-db9433fcc38f;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ca2eea555 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identity=20790 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c3ba0223-1d53-4329-ad24-db9433fcc38f,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c3ba0223-1d53-4329-ad24-db9433fcc38f,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.211 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-54tzs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ca2eea555 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identity=20790 ipv4=10.0.0.211 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-54tzs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05ed244240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=72 identity=12117 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-bnmq4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05ed244240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=72 identity=12117 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-bnmq4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=0e280de345 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4084 identity=43741 ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wtgj4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e280de345 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4084 identity=43741 ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wtgj4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fe3ace33ef datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=69 identity=36537 ipv4=10.0.0.195 ipv6= k8sPodName=kube-system/coredns-67659f764b-4pqvq subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe3ace33ef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=69 identity=36537 ipv4=10.0.0.195 ipv6= k8sPodName=kube-system/coredns-67659f764b-4pqvq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=05ed244240 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=72 identity=12117 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-bnmq4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=05ed244240 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=72 identity=12117 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-bnmq4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6ca2eea555 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1092 identity=20790 ipv4=10.0.0.211 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-54tzs subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ca2eea555 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1092 identity=20790 ipv4=10.0.0.211 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-54tzs subsys=daemon level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=485300404c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=27409 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.215 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-846r8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=485300404c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=27409 ipv4=10.0.0.215 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-846r8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=929d121791 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=133 identity=36537 ipv4=10.0.0.135 ipv6= k8sPodName=kube-system/coredns-67659f764b-flxrn subsys=endpoint level=info msg="Successful endpoint creation" containerID=929d121791 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=133 identity=36537 ipv4=10.0.0.135 ipv6= k8sPodName=kube-system/coredns-67659f764b-flxrn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=485300404c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1535 identity=27409 ipv4=10.0.0.215 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-846r8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=485300404c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1535 identity=27409 ipv4=10.0.0.215 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-846r8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f67b5de992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pwhgb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f67b5de992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identity=11325 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pwhgb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f67b5de992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identity=11325 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pwhgb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f67b5de992 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=90 identity=11325 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pwhgb subsys=endpoint level=info msg="Successful endpoint creation" containerID=f67b5de992 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=90 identity=11325 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pwhgb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5fff6f7664 endpointID=913 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-bbjjb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=5fff6f7664 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=913 identity=36537 ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bbjjb subsys=endpoint level=info msg="Delete endpoint request" containerID=6ca2eea555 endpointID=1092 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-54tzs subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=c3ba0223-1d53-4329-ad24-db9433fcc38f k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=c3ba0223-1d53-4329-ad24-db9433fcc38f k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=6ca2eea555 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1092 identity=20790 ipv4=10.0.0.211 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-54tzs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 d4bc93d2-37ef-4ee5-9f23-b4059a23e65e default }" containerID=d0dafa879812a1f60f0b4246c8ae33f205d27bf1bce632b658e24c2275b4a7c9 datapathConfiguration="&{false false false false false }" interface=lxc54d169860f2c k8sPodName=ingress-nginx/ingress-nginx-admission-create-9wnnt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0dafa8798 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9wnnt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0dafa8798 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=18a73d84-f61c-4f1d-b43b-1d4e0f2425d2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=18a73d84-f61c-4f1d-b43b-1d4e0f2425d2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9wnnt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d0dafa8798 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9wnnt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=18a73d84-f61c-4f1d-b43b-1d4e0f2425d2;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=18a73d84-f61c-4f1d-b43b-1d4e0f2425d2;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d0dafa8798 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identity=41089 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=18a73d84-f61c-4f1d-b43b-1d4e0f2425d2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=18a73d84-f61c-4f1d-b43b-1d4e0f2425d2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9wnnt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0dafa8798 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identity=41089 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9wnnt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d0dafa8798 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=434 identity=41089 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9wnnt subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0dafa8798 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=434 identity=41089 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9wnnt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d0dafa8798 endpointID=434 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-9wnnt subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=18a73d84-f61c-4f1d-b43b-1d4e0f2425d2 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=18a73d84-f61c-4f1d-b43b-1d4e0f2425d2 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=d0dafa8798 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=434 identity=41089 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9wnnt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 7056d7cf-37e6-4038-b328-0192349cefc7 default }" containerID=032b0e8cf181c253b6a238fce5cedbe2be000a2bd71607c6fb2c8165ad052531 datapathConfiguration="&{false false false false false }" interface=lxc9918be688e62 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4h8rw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=032b0e8cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4h8rw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=032b0e8cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4h8rw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=032b0e8cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4h8rw line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=032b0e8cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 identity=16405 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4h8rw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=032b0e8cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 identity=16405 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4h8rw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=032b0e8cf1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=756 identity=16405 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4h8rw subsys=endpoint level=info msg="Successful endpoint creation" containerID=032b0e8cf1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=756 identity=16405 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4h8rw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.222 045a8b1a-a834-493a-ae9d-da20fd3ad74e default }" containerID=d478b51e97aa50e99d28f5cde4c5131ee1012097c90a1246f38137a1b6622cc7 datapathConfiguration="&{false false false false false }" interface=lxca84bb1f1a5a8 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-49j2h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d478b51e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-49j2h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d478b51e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=d932aed0-2586-400d-8804-0de53da17e01,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=d932aed0-2586-400d-8804-0de53da17e01,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-49j2h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=d932aed0-2586-400d-8804-0de53da17e01;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=d932aed0-2586-400d-8804-0de53da17e01;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d478b51e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identity=34582 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=d932aed0-2586-400d-8804-0de53da17e01,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=d932aed0-2586-400d-8804-0de53da17e01,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-49j2h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d478b51e97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identity=34582 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-49j2h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d478b51e97 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2443 identity=34582 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-49j2h subsys=endpoint level=info msg="Successful endpoint creation" containerID=d478b51e97 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2443 identity=34582 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-49j2h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d478b51e97 endpointID=2443 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-49j2h subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=d932aed0-2586-400d-8804-0de53da17e01 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=d932aed0-2586-400d-8804-0de53da17e01 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=d478b51e97 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2443 identity=34582 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-49j2h subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=3ac6bb74-5b5d-464e-8082-1b4fec71dec8] Description:}]" policyAddRequest=77843ddf-b647-4ab3-9ffd-3857b501bcfc subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=77843ddf-b647-4ab3-9ffd-3857b501bcfc policyRevision=2 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=9bcaedc3-3732-4b12-9b8f-307d92fef4b6] Description:}]" policyAddRequest=09c46a94-863b-41e1-a9f7-0ee9325e5ad0 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=09c46a94-863b-41e1-a9f7-0ee9325e5ad0 policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.91 f6c332de-d530-44a7-a2f6-7a762e2ca7cc default }" containerID=f436acf14790a305d3c9086abb5ecb815fcde240c79b7bf0801cc3ae4cd03eef datapathConfiguration="&{false false false false false }" interface=lxc1feb4c378bd4 k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jx6cj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f436acf147 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=695 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jx6cj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f436acf147 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=695 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jx6cj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.13.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f436acf147 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=695 identity=7026 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jx6cj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f436acf147 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=695 identity=7026 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jx6cj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 51d98045-adc3-466d-ad83-9cb8c9a1d038 default }" containerID=bd8f93d0d4cc86e354affff97c44ac4a282548ca04154690a118d245748c11b7 datapathConfiguration="&{false false false false false }" interface=lxcadb9f02e3daa k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-d4kqd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd8f93d0d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-d4kqd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd8f93d0d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-d4kqd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.8.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd8f93d0d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 identity=13416 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-d4kqd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd8f93d0d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 identity=13416 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-d4kqd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f436acf147 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=695 identity=7026 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jx6cj subsys=endpoint level=info msg="Successful endpoint creation" containerID=f436acf147 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=695 identity=7026 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jx6cj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bd8f93d0d4 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2170 identity=13416 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-d4kqd subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd8f93d0d4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2170 identity=13416 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-d4kqd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.118 06de6681-4853-4ebf-a0d0-8b180e1a8404 default }" containerID=9987c7192cb680225004ecb19f5a2fbef21fa2c29f028f478535d9fe9720b410 datapathConfiguration="&{false false false false false }" interface=lxc95bf0f66f06c k8sPodName=openstack/pxc-operator-7cff949c8b-bjfrk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9987c7192c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-bjfrk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9987c7192c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-bjfrk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9987c7192c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-bjfrk line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9987c7192c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 identity=20699 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-bjfrk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9987c7192c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 identity=20699 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-bjfrk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9987c7192c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=853 identity=20699 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-bjfrk subsys=endpoint level=info msg="Successful endpoint creation" containerID=9987c7192c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=853 identity=20699 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-bjfrk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.185 d9c580e1-6e8b-4778-ae13-4b552697e37e default }" containerID=99a875b5170aea1a68ce332e95e56e3157afc9f183d6df2dbc67c685f057556d datapathConfiguration="&{false false false false false }" interface=lxce5e8f0d8beae k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99a875b517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99a875b517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99a875b517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identity=31992 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=99a875b517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identity=31992 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 3e877c76-10da-47f7-8bfc-9376d9bce564 default }" containerID=9617349837a8c038a0c408f3ff232aee87f49493bc81be60774d4f6b2d583fd6 datapathConfiguration="&{false false false false false }" interface=lxc9ef8da5a5c75 k8sPodName=local-path-storage/helper-pod-create-pvc-b2b24ffd-60f6-4ad7-af6b-850d2f2678c1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9617349837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2b24ffd-60f6-4ad7-af6b-850d2f2678c1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9617349837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2b24ffd-60f6-4ad7-af6b-850d2f2678c1 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9617349837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 identity=10322 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2b24ffd-60f6-4ad7-af6b-850d2f2678c1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9617349837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 identity=10322 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2b24ffd-60f6-4ad7-af6b-850d2f2678c1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99a875b517 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=519 identity=31992 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=99a875b517 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=519 identity=31992 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9617349837 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1298 identity=10322 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2b24ffd-60f6-4ad7-af6b-850d2f2678c1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9617349837 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1298 identity=10322 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2b24ffd-60f6-4ad7-af6b-850d2f2678c1 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9617349837 endpointID=1298 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b2b24ffd-60f6-4ad7-af6b-850d2f2678c1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9617349837 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1298 identity=10322 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2b24ffd-60f6-4ad7-af6b-850d2f2678c1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 ebb41647-dd14-4f3e-8cfe-c83fe38a03d1 default }" containerID=ac3107a197e950c6a4dc7d468e23caa4a4806a52b3b49483ee9e2799ec9a5e83 datapathConfiguration="&{false false false false false }" interface=lxc64d4c57f330e k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac3107a197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1275 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac3107a197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1275 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac3107a197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1275 identity=11013 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ac3107a197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1275 identity=11013 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ac3107a197 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1275 identity=11013 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac3107a197 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1275 identity=11013 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=d866f454-aeff-456a-a271-bd354f8e3909] Description:}]" policyAddRequest=b32d67a8-9f8c-4e99-b8ba-88984b197c0d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=b32d67a8-9f8c-4e99-b8ba-88984b197c0d policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.243 48e9b443-87e4-4077-bdb3-277c26dde4d7 default }" containerID=80adb0f8c9cb5b938d8103fde80f6b06b843234e522f1c74ff94293ff68f4aff datapathConfiguration="&{false false false false false }" interface=lxc8ddde3074bd4 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80adb0f8c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 ipv4=10.0.0.243 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80adb0f8c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.243 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=80adb0f8c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.243 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=23.0.7;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-20.0.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80adb0f8c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identity=13918 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.243 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80adb0f8c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identity=13918 ipv4=10.0.0.243 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=80adb0f8c9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1496 identity=13918 ipv4=10.0.0.243 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=80adb0f8c9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1496 identity=13918 ipv4=10.0.0.243 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.97 8c76f7f1-9a05-4883-85b3-b6b1c04eb2fa default }" containerID=baf309192166f12d8f233cbfc2999c529226793501684af676089be98a659bc0 datapathConfiguration="&{false false false false false }" interface=lxc0e3227be2883 k8sPodName=monitoring/node-feature-discovery-worker-dg9s9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=baf3091921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dg9s9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=baf3091921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dg9s9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=baf3091921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dg9s9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=baf3091921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 identity=9391 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dg9s9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=baf3091921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 identity=9391 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dg9s9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 7a50bdde-ed44-4f7a-b5c1-5676ffbcf21f default }" containerID=d601f01bab9520d5b0928e84e7dea57472204ffd328e7e3fe85abd904569f485 datapathConfiguration="&{false false false false false }" interface=lxcf1c54ca929ab k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5h4m8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d601f01bab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5h4m8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d601f01bab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5h4m8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.5 bf678464-8a2a-4565-85fa-ff6c67d588c9 default }" containerID=839c2b25342c21cb0cc35a9b24ec4ca731e632179c0f72737c8c515af861513c datapathConfiguration="&{false false false false false }" interface=lxc4301488da20f k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-q44tg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=839c2b2534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1782 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-q44tg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=839c2b2534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1782 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-q44tg subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d601f01bab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identity=47680 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5h4m8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d601f01bab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identity=47680 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5h4m8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=839c2b2534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1782 identity=15742 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-q44tg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=839c2b2534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1782 identity=15742 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-q44tg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=baf3091921 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2023 identity=9391 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dg9s9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=baf3091921 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2023 identity=9391 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dg9s9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d601f01bab datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1246 identity=47680 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5h4m8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d601f01bab datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1246 identity=47680 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5h4m8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=839c2b2534 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1782 identity=15742 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-q44tg subsys=endpoint level=info msg="Successful endpoint creation" containerID=839c2b2534 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1782 identity=15742 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-q44tg subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.011859672379509516 newInterval=7m30s subsys=map-ct level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.30 515d0899-0f38-45ed-863a-018ad353478a default }" containerID=6350153c50da916d7e2b24ea5d6d7bec705c66ef4131eae516408d7c978d7e4a datapathConfiguration="&{false false false false false }" interface=lxc2f72953054a8 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9gpn5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6350153c50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3547 ipv4=10.0.0.30 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9gpn5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6350153c50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3547 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.30 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9gpn5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6350153c50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3547 identity=62396 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.30 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9gpn5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6350153c50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3547 identity=62396 ipv4=10.0.0.30 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9gpn5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6350153c50 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3547 identity=62396 ipv4=10.0.0.30 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9gpn5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6350153c50 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3547 identity=62396 ipv4=10.0.0.30 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-9gpn5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3672 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-171-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03672 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03672 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03672 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03672:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3672 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 d36ca299-9d5c-4ae5-85f4-b61e06844645 default }" containerID=90f4654f817ec6363abff2bb3297dcb8499e9fd8e055932c3a40e9dd1ca65e68 datapathConfiguration="&{false false false false false }" interface=lxcc1bb097d8590 k8sPodName=monitoring/kube-prometheus-stack-admission-create-cfzlc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90f4654f81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cfzlc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90f4654f81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=b67cf284-e4c9-42cc-81e0-faaac24f5fb4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=b67cf284-e4c9-42cc-81e0-faaac24f5fb4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cfzlc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=b67cf284-e4c9-42cc-81e0-faaac24f5fb4;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=b67cf284-e4c9-42cc-81e0-faaac24f5fb4;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90f4654f81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 identity=39043 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=b67cf284-e4c9-42cc-81e0-faaac24f5fb4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=b67cf284-e4c9-42cc-81e0-faaac24f5fb4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cfzlc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=90f4654f81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 identity=39043 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cfzlc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=90f4654f81 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3578 identity=39043 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cfzlc subsys=endpoint level=info msg="Successful endpoint creation" containerID=90f4654f81 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3578 identity=39043 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cfzlc subsys=daemon level=info msg="Delete endpoint request" containerID=90f4654f81 endpointID=3578 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-cfzlc subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=b67cf284-e4c9-42cc-81e0-faaac24f5fb4 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=b67cf284-e4c9-42cc-81e0-faaac24f5fb4 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=90f4654f81 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3578 identity=39043 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cfzlc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 cb5ab696-d167-4dc7-929b-78f442cc081c default }" containerID=5de06329c9029037df2cc60d43b97f564b7a0fd3fa23d065c5c87c6104204160 datapathConfiguration="&{false false false false false }" interface=lxcf9f805a5738c k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-pq2xc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5de06329c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1831 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-pq2xc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5de06329c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1831 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-pq2xc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5de06329c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1831 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-pq2xc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5de06329c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1831 identity=7809 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-pq2xc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5de06329c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1831 identity=7809 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-pq2xc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 e7b53ddf-923a-44cd-8711-2e1996d81c24 default }" containerID=635ccb5239f08c65782c9584156369b0604a3cec56b86219d65d456e3d4d9624 datapathConfiguration="&{false false false false false }" interface=lxc620622a0fca3 k8sPodName=monitoring/kube-prometheus-stack-grafana-54dfd849d5-kttwx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=635ccb5239 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-54dfd849d5-kttwx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=635ccb5239 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-54dfd849d5-kttwx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=635ccb5239 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identity=8753 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-54dfd849d5-kttwx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=635ccb5239 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identity=8753 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-54dfd849d5-kttwx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 77b183c2-99bb-41fa-9d8e-c57306a55bb2 default }" containerID=43a282473a2ca8ce74a23712bac54405b8617d6fecb6f3cb59b3fa62e86f0286 datapathConfiguration="&{false false false false false }" interface=lxcde30943fea33 k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-5qsns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43a282473a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-5qsns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43a282473a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-5qsns subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:chart=kube-prometheus-stack-58.2.1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43a282473a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identity=20837 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-5qsns oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43a282473a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identity=20837 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-5qsns subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=635ccb5239 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=355 identity=8753 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-54dfd849d5-kttwx subsys=endpoint level=info msg="Successful endpoint creation" containerID=635ccb5239 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=355 identity=8753 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-54dfd849d5-kttwx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5de06329c9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1831 identity=7809 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-pq2xc subsys=endpoint level=info msg="Successful endpoint creation" containerID=5de06329c9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1831 identity=7809 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-pq2xc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=43a282473a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=986 identity=20837 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-5qsns subsys=endpoint level=info msg="Successful endpoint creation" containerID=43a282473a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=986 identity=20837 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-5qsns subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.161 c74e089f-d54e-4453-ba11-f935cc4e5185 default }" containerID=3edaef542599ec10b7248a507ac017e802d2c4bbe053d866a08af48fdc931306 datapathConfiguration="&{false false false false false }" interface=lxcc63f832bef7d k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tggcb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3edaef5425 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tggcb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3edaef5425 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=5fc861a0-a05d-4068-9419-39aa5ef49d53,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=5fc861a0-a05d-4068-9419-39aa5ef49d53,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tggcb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=5fc861a0-a05d-4068-9419-39aa5ef49d53;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=5fc861a0-a05d-4068-9419-39aa5ef49d53;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3edaef5425 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identity=20488 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=5fc861a0-a05d-4068-9419-39aa5ef49d53,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=5fc861a0-a05d-4068-9419-39aa5ef49d53,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tggcb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3edaef5425 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identity=20488 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tggcb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3edaef5425 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=227 identity=20488 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tggcb subsys=endpoint level=info msg="Successful endpoint creation" containerID=3edaef5425 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=227 identity=20488 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tggcb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3edaef5425 endpointID=227 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-tggcb subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=5fc861a0-a05d-4068-9419-39aa5ef49d53 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=5fc861a0-a05d-4068-9419-39aa5ef49d53 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=3edaef5425 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=227 identity=20488 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tggcb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 a1a46845-54ca-42ee-b90e-b53c0ac2b876 default }" containerID=8bac8f3327bc2e39ce49fa94bc3a0b098a5b9e0535fd6233c9adae914e78d2c7 datapathConfiguration="&{false false false false false }" interface=lxc1fea715efeaf k8sPodName=local-path-storage/helper-pod-create-pvc-fce648f1-a979-475d-92a8-bd5280660ee2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8bac8f3327 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1215 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fce648f1-a979-475d-92a8-bd5280660ee2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8bac8f3327 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1215 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fce648f1-a979-475d-92a8-bd5280660ee2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8bac8f3327 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1215 identity=10322 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fce648f1-a979-475d-92a8-bd5280660ee2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8bac8f3327 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1215 identity=10322 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fce648f1-a979-475d-92a8-bd5280660ee2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8bac8f3327 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1215 identity=10322 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fce648f1-a979-475d-92a8-bd5280660ee2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8bac8f3327 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1215 identity=10322 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fce648f1-a979-475d-92a8-bd5280660ee2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.160 f13c7888-f8f5-44d6-88d5-a9cadc469649 default }" containerID=62d76cdef7b5f93bde26d6bfe4358651058077be56ca6ee0338e38556ef8526d datapathConfiguration="&{false false false false false }" interface=lxc6696699b613c k8sPodName=local-path-storage/helper-pod-create-pvc-0a886507-307d-4647-a8b6-cf4141a4e681 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62d76cdef7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2516 ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0a886507-307d-4647-a8b6-cf4141a4e681 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62d76cdef7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2516 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0a886507-307d-4647-a8b6-cf4141a4e681 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=62d76cdef7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2516 identity=10322 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0a886507-307d-4647-a8b6-cf4141a4e681 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62d76cdef7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2516 identity=10322 ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0a886507-307d-4647-a8b6-cf4141a4e681 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62d76cdef7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2516 identity=10322 ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0a886507-307d-4647-a8b6-cf4141a4e681 subsys=endpoint level=info msg="Successful endpoint creation" containerID=62d76cdef7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2516 identity=10322 ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0a886507-307d-4647-a8b6-cf4141a4e681 subsys=daemon level=info msg="Delete endpoint request" containerID=8bac8f3327 endpointID=1215 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fce648f1-a979-475d-92a8-bd5280660ee2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8bac8f3327 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1215 identity=10322 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fce648f1-a979-475d-92a8-bd5280660ee2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 8fd43594-9e00-45de-af5c-026c23b354c0 default }" containerID=79f55e5c7986ac1afe520fab68ae5dcc8a4b7f8984549455f1f6593cbdd9ddc0 datapathConfiguration="&{false false false false false }" interface=lxc71c2e993879a k8sPodName=monitoring/loki-gateway-748b556d75-fqd8x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79f55e5c79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=981 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-fqd8x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 bdb1c97b-e053-492f-87d8-785eb6dd3ce8 default }" containerID=c8efc6ccbec117565e73611379514d0498082141a201e8768fc94f248ad76e4d datapathConfiguration="&{false false false false false }" interface=lxcf82d5fb91586 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=79f55e5c79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=981 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-fqd8x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=c8efc6ccbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8efc6ccbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=79f55e5c79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=981 identity=24615 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-fqd8x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79f55e5c79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=981 identity=24615 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-fqd8x subsys=endpoint level=info msg="Invalid state transition skipped" containerID=c8efc6ccbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8efc6ccbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identity=56006 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8efc6ccbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identity=56006 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 8ead0b2a-700f-4f25-b736-816a870bca84 default }" containerID=88ff39c9f50a0ea34187eaf3c6df01c812d978482c732acc19198b450c0992ce datapathConfiguration="&{false false false false false }" interface=lxc4bb2d095be7f k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88ff39c9f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88ff39c9f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Delete endpoint request" containerID=62d76cdef7 endpointID=2516 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0a886507-307d-4647-a8b6-cf4141a4e681 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88ff39c9f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 identity=19639 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88ff39c9f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2005 identity=19639 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Removed endpoint" containerID=62d76cdef7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2516 identity=10322 ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0a886507-307d-4647-a8b6-cf4141a4e681 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8efc6ccbe datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1607 identity=56006 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8efc6ccbe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1607 identity=56006 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=79f55e5c79 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=981 identity=24615 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-fqd8x subsys=endpoint level=info msg="Successful endpoint creation" containerID=79f55e5c79 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=981 identity=24615 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-fqd8x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=88ff39c9f5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2005 identity=19639 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=88ff39c9f5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2005 identity=19639 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.61 9b36d238-9e74-4e23-a5be-82dd15917364 default }" containerID=b7588da1b7cf6e561f2f6df31459ef4a18b666ae9d955b7ee4fab017df8f4cff datapathConfiguration="&{false false false false false }" interface=lxc44835b84e4a5 k8sPodName=local-path-storage/helper-pod-create-pvc-66ea930f-b833-4979-8d08-c4f28df0fe3c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7588da1b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66ea930f-b833-4979-8d08-c4f28df0fe3c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7588da1b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66ea930f-b833-4979-8d08-c4f28df0fe3c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7588da1b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identity=10322 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66ea930f-b833-4979-8d08-c4f28df0fe3c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7588da1b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identity=10322 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66ea930f-b833-4979-8d08-c4f28df0fe3c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7588da1b7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1933 identity=10322 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66ea930f-b833-4979-8d08-c4f28df0fe3c subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7588da1b7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1933 identity=10322 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66ea930f-b833-4979-8d08-c4f28df0fe3c subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.46 23b4d717-54fc-4622-a972-3984e9a3c646 default }" containerID=62b5ebe2dbdd79c82f78b091fee3cac6c713048e963cbf5f6cd969a8c3c29ce4 datapathConfiguration="&{false false false false false }" interface=lxc93c2497d796d k8sPodName=monitoring/vector-gjmk5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62b5ebe2db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/vector-gjmk5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62b5ebe2db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/vector-gjmk5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62b5ebe2db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 identity=42645 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/vector-gjmk5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62b5ebe2db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 identity=42645 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/vector-gjmk5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 762ad32b-606b-4e5d-b019-1489fb1f34a6 default }" containerID=327dd26f1757ff831405e50b371b57dc3918cbf428ac00d399f5f071b3a437fe datapathConfiguration="&{false false false false false }" interface=lxca67b4aa00e2e k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=327dd26f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2034 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=327dd26f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2034 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=327dd26f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2034 identity=21712 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=327dd26f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2034 identity=21712 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62b5ebe2db datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=96 identity=42645 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/vector-gjmk5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=62b5ebe2db datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=96 identity=42645 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/vector-gjmk5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=327dd26f17 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2034 identity=21712 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=327dd26f17 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2034 identity=21712 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.66 eb3f8be5-8f09-417b-b57f-bc1ddb7f8de3 default }" containerID=6efaf622e99d2b273df3cf7dcbfc103df20b5c8a046d8acc4ee35867b6129246 datapathConfiguration="&{false false false false false }" interface=lxcbbe68dea5163 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6efaf622e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=823 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6efaf622e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=823 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6efaf622e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=823 identity=6210 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6efaf622e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=823 identity=6210 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6efaf622e9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=823 identity=6210 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6efaf622e9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=823 identity=6210 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b7588da1b7 endpointID=1933 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-66ea930f-b833-4979-8d08-c4f28df0fe3c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b7588da1b7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1933 identity=10322 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66ea930f-b833-4979-8d08-c4f28df0fe3c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 0723e97f-cd74-4610-bc0d-95e739fe6e67 default }" containerID=b6fa12e61ac877b4a45774e36919c650f37d0796144dd69ab8864e025289ee74 datapathConfiguration="&{false false false false false }" interface=lxca057eaadb95e k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6fa12e61a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6fa12e61a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6fa12e61a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 identity=23289 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b6fa12e61a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 identity=23289 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b6fa12e61a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3745 identity=23289 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6fa12e61a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3745 identity=23289 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.205 5fe41c5e-d0c7-403e-b74e-81aabf1125e4 default }" containerID=f5df3abc68e3400944a7c22f7054e6d94614ce3431edb6fef9dd8c15bb531d6b datapathConfiguration="&{false false false false false }" interface=lxc56532bc1c4a3 k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vjxwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5df3abc68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3113 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vjxwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5df3abc68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3113 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vjxwh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.12.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5df3abc68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3113 identity=32107 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vjxwh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5df3abc68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3113 identity=32107 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vjxwh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5df3abc68 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3113 identity=32107 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vjxwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5df3abc68 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3113 identity=32107 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vjxwh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.145 8e1ab2d3-f03a-4d4c-855a-93194c4d6b33 default }" containerID=d9e73a29149b11be80f78ca1278075f397f0121359d6db7565ac6fb808356d41 datapathConfiguration="&{false false false false false }" interface=lxc97896f5881c7 k8sPodName=openstack/memcached-memcached-6479589586-kwtfv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9e73a2914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kwtfv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9e73a2914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kwtfv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9e73a2914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identity=55183 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kwtfv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d9e73a2914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identity=55183 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kwtfv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d9e73a2914 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1922 identity=55183 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kwtfv subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9e73a2914 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1922 identity=55183 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kwtfv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.235 355c4f19-0023-4dce-b04f-78cc0fd89533 default }" containerID=d50300c4d0abcf52fbfb838cc2ff1f06d8e935687989250bd7dfa610e39eee46 datapathConfiguration="&{false false false false false }" interface=lxc5699856c2207 k8sPodName=local-path-storage/helper-pod-create-pvc-04900bd4-ce20-4054-a773-44e87aaf5444 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d50300c4d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04900bd4-ce20-4054-a773-44e87aaf5444 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d50300c4d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04900bd4-ce20-4054-a773-44e87aaf5444 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d50300c4d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 identity=10322 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04900bd4-ce20-4054-a773-44e87aaf5444 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d50300c4d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 identity=10322 ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04900bd4-ce20-4054-a773-44e87aaf5444 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d50300c4d0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1591 identity=10322 ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04900bd4-ce20-4054-a773-44e87aaf5444 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d50300c4d0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1591 identity=10322 ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04900bd4-ce20-4054-a773-44e87aaf5444 subsys=daemon level=info msg="Delete endpoint request" containerID=d50300c4d0 endpointID=1591 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-04900bd4-ce20-4054-a773-44e87aaf5444 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d50300c4d0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1591 identity=10322 ipv4=10.0.0.235 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-04900bd4-ce20-4054-a773-44e87aaf5444 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 8e5418a2-37e1-4a61-b3c4-104f8ad98384 default }" containerID=49d44d086778bcb58e086527e5ba8575401aac6dec169fb3ad15a433bb8474d9 datapathConfiguration="&{false false false false false }" interface=lxc343d3bd4c036 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49d44d0867 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49d44d0867 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49d44d0867 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 identity=46644 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=49d44d0867 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 identity=46644 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=49d44d0867 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2814 identity=46644 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=49d44d0867 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2814 identity=46644 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.138 6ebb9304-974c-4059-ae32-6c0836062ab0 default }" containerID=c1e2da77c0b4abbfe212ba8bfcc90377f3329e2a09b062bcb5d45d9b155db00d datapathConfiguration="&{false false false false false }" interface=lxc599f21489444 k8sPodName=openstack/keystone-credential-setup-x5lzt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1e2da77c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2318 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-credential-setup-x5lzt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1e2da77c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2318 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=317d8896-059c-4f7c-8df3-86f4239f2187,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=317d8896-059c-4f7c-8df3-86f4239f2187,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-credential-setup-x5lzt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c1e2da77c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2318 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-credential-setup-x5lzt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=317d8896-059c-4f7c-8df3-86f4239f2187;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=317d8896-059c-4f7c-8df3-86f4239f2187;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1e2da77c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2318 identity=35955 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=317d8896-059c-4f7c-8df3-86f4239f2187,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=317d8896-059c-4f7c-8df3-86f4239f2187,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-credential-setup-x5lzt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1e2da77c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2318 identity=35955 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-credential-setup-x5lzt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1e2da77c0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2318 identity=35955 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-credential-setup-x5lzt subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1e2da77c0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2318 identity=35955 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-credential-setup-x5lzt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.129 0b769596-0243-4d5c-905d-2dfba600a64c default }" containerID=bfef6c210d998e6ff2c8ce05d004592784bbe8b9eec4fc3fa815fdc0888571b0 datapathConfiguration="&{false false false false false }" interface=lxcecd5cd7a737b k8sPodName=openstack/keystone-api-79459b8758-d7mj7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfef6c210d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=557 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-api-79459b8758-d7mj7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfef6c210d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=557 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-api-79459b8758-d7mj7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfef6c210d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=557 identity=12035 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-api-79459b8758-d7mj7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bfef6c210d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=557 identity=12035 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-api-79459b8758-d7mj7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bfef6c210d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=557 identity=12035 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-api-79459b8758-d7mj7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfef6c210d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=557 identity=12035 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-api-79459b8758-d7mj7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c1e2da77c0 endpointID=2318 k8sNamespace=openstack k8sPodName=keystone-credential-setup-x5lzt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=317d8896-059c-4f7c-8df3-86f4239f2187 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=317d8896-059c-4f7c-8df3-86f4239f2187 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c1e2da77c0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2318 identity=35955 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-credential-setup-x5lzt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 6f9577f6-7859-4028-a4a0-4ad1feeb7596 default }" containerID=88a0c394dbaca64db66c670db64180e49ec021222acbeec5b0ad07bdd5f20e27 datapathConfiguration="&{false false false false false }" interface=lxc2bc3cd7a35c8 k8sPodName=openstack/keystone-db-init-wfln6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88a0c394db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-db-init-wfln6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88a0c394db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ca23ba93-7e17-4f2c-95df-36f3b7fd476c,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=ca23ba93-7e17-4f2c-95df-36f3b7fd476c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-db-init-wfln6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=88a0c394db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-db-init-wfln6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ca23ba93-7e17-4f2c-95df-36f3b7fd476c;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=ca23ba93-7e17-4f2c-95df-36f3b7fd476c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88a0c394db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 identity=11165 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ca23ba93-7e17-4f2c-95df-36f3b7fd476c,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=ca23ba93-7e17-4f2c-95df-36f3b7fd476c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-db-init-wfln6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88a0c394db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 identity=11165 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-db-init-wfln6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=88a0c394db datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1428 identity=11165 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-db-init-wfln6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=88a0c394db datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1428 identity=11165 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-db-init-wfln6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=88a0c394db endpointID=1428 k8sNamespace=openstack k8sPodName=keystone-db-init-wfln6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ca23ba93-7e17-4f2c-95df-36f3b7fd476c k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=ca23ba93-7e17-4f2c-95df-36f3b7fd476c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=88a0c394db datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1428 identity=11165 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/keystone-db-init-wfln6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 add0908f-9747-4b38-9bb6-c00dc5c5aaa4 default }" containerID=06e1791358e35f7fa8eb030c404ed19dafc07a4b28adb7e1a5ff37fb5c586ff7 datapathConfiguration="&{false false false false false }" interface=lxc18064a2a3a72 k8sPodName=openstack/keystone-fernet-setup-mrln7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06e1791358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2606 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-mrln7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06e1791358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2606 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=55ff0a54-258f-4542-8751-cd5ef7d80606,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=55ff0a54-258f-4542-8751-cd5ef7d80606,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-mrln7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=55ff0a54-258f-4542-8751-cd5ef7d80606;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=55ff0a54-258f-4542-8751-cd5ef7d80606;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=06e1791358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2606 identity=21092 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=55ff0a54-258f-4542-8751-cd5ef7d80606,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=55ff0a54-258f-4542-8751-cd5ef7d80606,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-mrln7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06e1791358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2606 identity=21092 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-mrln7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=06e1791358 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2606 identity=21092 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-mrln7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=06e1791358 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2606 identity=21092 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-mrln7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=06e1791358 endpointID=2606 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-mrln7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=55ff0a54-258f-4542-8751-cd5ef7d80606 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=55ff0a54-258f-4542-8751-cd5ef7d80606 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=06e1791358 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2606 identity=21092 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-fernet-setup-mrln7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 f8c75992-89c6-4444-a94f-cbf575031c7e default }" containerID=d65322742ce9414af3d7ffe81211da175c45e1fbb03b3529765e0bd9975b6a5a datapathConfiguration="&{false false false false false }" interface=lxc1146876ae2db k8sPodName=openstack/keystone-db-sync-b9bj9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d65322742c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-db-sync-b9bj9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d65322742c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=be900718-fc99-4186-aa37-49c2409b5c58,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=be900718-fc99-4186-aa37-49c2409b5c58,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-db-sync-b9bj9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=be900718-fc99-4186-aa37-49c2409b5c58;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=be900718-fc99-4186-aa37-49c2409b5c58;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d65322742c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 identity=11477 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=be900718-fc99-4186-aa37-49c2409b5c58,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=be900718-fc99-4186-aa37-49c2409b5c58,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-db-sync-b9bj9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d65322742c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 identity=11477 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-db-sync-b9bj9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d65322742c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3204 identity=11477 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-db-sync-b9bj9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d65322742c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3204 identity=11477 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-db-sync-b9bj9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d65322742c endpointID=3204 k8sNamespace=openstack k8sPodName=keystone-db-sync-b9bj9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=be900718-fc99-4186-aa37-49c2409b5c58 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=be900718-fc99-4186-aa37-49c2409b5c58 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d65322742c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3204 identity=11477 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-db-sync-b9bj9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 697c2bbb-60c4-48de-86d7-325e4cee8d20 default }" containerID=48c1008f24a16b54a1184a92b4ca156e9cbd5f0ba0414d9e16a06eadbfb713c0 datapathConfiguration="&{false false false false false }" interface=lxc76b8ec529b9f k8sPodName=openstack/keystone-rabbit-init-rtpn8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48c1008f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-rabbit-init-rtpn8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48c1008f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=29ecef4f-1020-415b-85ee-9a8273ccc79d,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=29ecef4f-1020-415b-85ee-9a8273ccc79d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-rabbit-init-rtpn8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=48c1008f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-rabbit-init-rtpn8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=29ecef4f-1020-415b-85ee-9a8273ccc79d;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=29ecef4f-1020-415b-85ee-9a8273ccc79d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48c1008f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identity=21421 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=29ecef4f-1020-415b-85ee-9a8273ccc79d,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=29ecef4f-1020-415b-85ee-9a8273ccc79d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-rabbit-init-rtpn8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48c1008f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identity=21421 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-rabbit-init-rtpn8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=48c1008f24 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=201 identity=21421 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-rabbit-init-rtpn8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=48c1008f24 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=201 identity=21421 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-rabbit-init-rtpn8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=48c1008f24 endpointID=201 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-rtpn8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=29ecef4f-1020-415b-85ee-9a8273ccc79d k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=29ecef4f-1020-415b-85ee-9a8273ccc79d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=48c1008f24 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=201 identity=21421 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-rabbit-init-rtpn8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 607ce9be-3ff9-4389-9419-6626c9711df6 default }" containerID=975c6d6dec1065f1073c87add7d9aa2ecad77ba01d134177a2d85ca1c733fc20 datapathConfiguration="&{false false false false false }" interface=lxc64e2888dcfb8 k8sPodName=openstack/keystone-domain-manage-b8d7w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=975c6d6dec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1134 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-domain-manage-b8d7w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=975c6d6dec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1134 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=70c6b4d0-2e88-490a-a2d8-a23bf98fc79e,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=70c6b4d0-2e88-490a-a2d8-a23bf98fc79e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-domain-manage-b8d7w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=70c6b4d0-2e88-490a-a2d8-a23bf98fc79e;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=70c6b4d0-2e88-490a-a2d8-a23bf98fc79e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=975c6d6dec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1134 identity=10973 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=70c6b4d0-2e88-490a-a2d8-a23bf98fc79e,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=70c6b4d0-2e88-490a-a2d8-a23bf98fc79e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-domain-manage-b8d7w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=975c6d6dec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1134 identity=10973 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-domain-manage-b8d7w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=975c6d6dec datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1134 identity=10973 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-domain-manage-b8d7w subsys=endpoint level=info msg="Successful endpoint creation" containerID=975c6d6dec datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1134 identity=10973 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-domain-manage-b8d7w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=975c6d6dec endpointID=1134 k8sNamespace=openstack k8sPodName=keystone-domain-manage-b8d7w subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=70c6b4d0-2e88-490a-a2d8-a23bf98fc79e k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=70c6b4d0-2e88-490a-a2d8-a23bf98fc79e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=975c6d6dec datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1134 identity=10973 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-domain-manage-b8d7w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 1d1a6945-ce41-4819-a908-619175a698e3 default }" containerID=d508b5b9b9bb7f5c105a0033d50ab54de1299c51a6de687da5699d5773bb4d77 datapathConfiguration="&{false false false false false }" interface=lxcab7af7d8e1a0 k8sPodName=openstack/keystone-bootstrap-kvvhl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d508b5b9b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-bootstrap-kvvhl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d508b5b9b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fe0e2d2b-3967-4383-871a-f1b8c5ae585b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=fe0e2d2b-3967-4383-871a-f1b8c5ae585b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-bootstrap-kvvhl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fe0e2d2b-3967-4383-871a-f1b8c5ae585b;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=fe0e2d2b-3967-4383-871a-f1b8c5ae585b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d508b5b9b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identity=3932 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fe0e2d2b-3967-4383-871a-f1b8c5ae585b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=fe0e2d2b-3967-4383-871a-f1b8c5ae585b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-bootstrap-kvvhl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d508b5b9b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=88 identity=3932 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-bootstrap-kvvhl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d508b5b9b9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=88 identity=3932 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-bootstrap-kvvhl subsys=endpoint level=info msg="Successful endpoint creation" containerID=d508b5b9b9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=88 identity=3932 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-bootstrap-kvvhl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d508b5b9b9 endpointID=88 k8sNamespace=openstack k8sPodName=keystone-bootstrap-kvvhl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fe0e2d2b-3967-4383-871a-f1b8c5ae585b k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=fe0e2d2b-3967-4383-871a-f1b8c5ae585b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d508b5b9b9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=88 identity=3932 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-bootstrap-kvvhl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 ae6a88ec-8359-40fa-bc31-e47012e7ae38 default }" containerID=f801f995689fbd245137b7f20fce33102e7f11bb3eae7e381711c6c2c07bb644 datapathConfiguration="&{false false false false false }" interface=lxc443afd2417ef k8sPodName=local-path-storage/helper-pod-create-pvc-a72721cd-6a98-4946-ba34-92788cc3e454 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f801f99568 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a72721cd-6a98-4946-ba34-92788cc3e454 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f801f99568 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a72721cd-6a98-4946-ba34-92788cc3e454 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f801f99568 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 identity=10322 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a72721cd-6a98-4946-ba34-92788cc3e454 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f801f99568 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 identity=10322 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a72721cd-6a98-4946-ba34-92788cc3e454 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f801f99568 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=130 identity=10322 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a72721cd-6a98-4946-ba34-92788cc3e454 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f801f99568 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=130 identity=10322 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a72721cd-6a98-4946-ba34-92788cc3e454 subsys=daemon level=info msg="Delete endpoint request" containerID=f801f99568 endpointID=130 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a72721cd-6a98-4946-ba34-92788cc3e454 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f801f99568 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=130 identity=10322 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a72721cd-6a98-4946-ba34-92788cc3e454 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 6efaf822-8eae-4763-b084-8e45f223722f default }" containerID=ba93318752be5dcc64bbb3144bfeae7d7a48a58c633217735ee80a3c2d12cd8b datapathConfiguration="&{false false false false false }" interface=lxc7aeb4a206644 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba93318752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba93318752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba93318752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identity=7231 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ba93318752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identity=7231 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba93318752 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1227 identity=7231 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba93318752 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1227 identity=7231 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.165 3f0b71b3-8f68-4a33-9832-8211f95ee7dd default }" containerID=214fd423a86011fba6cbf0f9dab6413882eae96df4ffb7691e2ec10201532e65 datapathConfiguration="&{false false false false false }" interface=lxc7e5cf59a4d49 k8sPodName=openstack/barbican-api-65b6c46f5c-d9khh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=214fd423a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-api-65b6c46f5c-d9khh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=214fd423a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-api-65b6c46f5c-d9khh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=214fd423a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 identity=18636 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-api-65b6c46f5c-d9khh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=214fd423a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 identity=18636 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-api-65b6c46f5c-d9khh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 27c4f141-fe79-45fd-8e12-c93c508b0d28 default }" containerID=7a7b7fb1b55326d546bd220d09f52ca91c44ed270c40abe92427f0d21ebadbdd datapathConfiguration="&{false false false false false }" interface=lxc06caf62f347c k8sPodName=openstack/barbican-db-init-rk5m6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a7b7fb1b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4027 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-init-rk5m6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a7b7fb1b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4027 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cb0a5d52-3c47-4782-993d-efd01e65a863,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=cb0a5d52-3c47-4782-993d-efd01e65a863,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-init-rk5m6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=cb0a5d52-3c47-4782-993d-efd01e65a863;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=cb0a5d52-3c47-4782-993d-efd01e65a863;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a7b7fb1b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4027 identity=50187 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cb0a5d52-3c47-4782-993d-efd01e65a863,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=cb0a5d52-3c47-4782-993d-efd01e65a863,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-init-rk5m6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a7b7fb1b5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4027 identity=50187 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-init-rk5m6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=214fd423a8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1772 identity=18636 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-api-65b6c46f5c-d9khh subsys=endpoint level=info msg="Successful endpoint creation" containerID=214fd423a8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1772 identity=18636 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-api-65b6c46f5c-d9khh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7a7b7fb1b5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4027 identity=50187 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-init-rk5m6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a7b7fb1b5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4027 identity=50187 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-init-rk5m6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7a7b7fb1b5 endpointID=4027 k8sNamespace=openstack k8sPodName=barbican-db-init-rk5m6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=cb0a5d52-3c47-4782-993d-efd01e65a863 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=cb0a5d52-3c47-4782-993d-efd01e65a863 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7a7b7fb1b5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4027 identity=50187 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/barbican-db-init-rk5m6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 a88bf337-8f21-4166-8f7f-c4db465deb31 default }" containerID=937432ca8d9368855e1d7b8666ab95e9e9279bde3ded30210581bee31e11d1f6 datapathConfiguration="&{false false false false false }" interface=lxcbbfb0ac0339e k8sPodName=openstack/barbican-db-sync-h875v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=937432ca8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3949 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-db-sync-h875v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=937432ca8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3949 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c1e0af6d-113f-4c38-a4ca-8b01749daff2,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=c1e0af6d-113f-4c38-a4ca-8b01749daff2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-db-sync-h875v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c1e0af6d-113f-4c38-a4ca-8b01749daff2;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=c1e0af6d-113f-4c38-a4ca-8b01749daff2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=937432ca8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3949 identity=17909 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c1e0af6d-113f-4c38-a4ca-8b01749daff2,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=c1e0af6d-113f-4c38-a4ca-8b01749daff2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-db-sync-h875v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=937432ca8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3949 identity=17909 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-db-sync-h875v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=937432ca8d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3949 identity=17909 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-db-sync-h875v subsys=endpoint level=info msg="Successful endpoint creation" containerID=937432ca8d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3949 identity=17909 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-db-sync-h875v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=937432ca8d endpointID=3949 k8sNamespace=openstack k8sPodName=barbican-db-sync-h875v subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c1e0af6d-113f-4c38-a4ca-8b01749daff2 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=c1e0af6d-113f-4c38-a4ca-8b01749daff2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=937432ca8d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3949 identity=17909 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-db-sync-h875v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 c58eea44-30d4-46fd-bf30-7668b43221ac default }" containerID=a5a93d57e6da055800b697abcc4d92759bc4be6280b211b17d36a152c5f57f64 datapathConfiguration="&{false false false false false }" interface=lxc9a13219f3cf8 k8sPodName=openstack/barbican-rabbit-init-bqt8j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5a93d57e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-rabbit-init-bqt8j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5a93d57e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=72290c41-619e-4e02-8361-89b8c6ceeb9d,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=72290c41-619e-4e02-8361-89b8c6ceeb9d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-rabbit-init-bqt8j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=72290c41-619e-4e02-8361-89b8c6ceeb9d;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=72290c41-619e-4e02-8361-89b8c6ceeb9d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5a93d57e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identity=25288 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=72290c41-619e-4e02-8361-89b8c6ceeb9d,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=72290c41-619e-4e02-8361-89b8c6ceeb9d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-rabbit-init-bqt8j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5a93d57e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identity=25288 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-rabbit-init-bqt8j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a5a93d57e6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1574 identity=25288 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-rabbit-init-bqt8j subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5a93d57e6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1574 identity=25288 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-rabbit-init-bqt8j subsys=daemon level=info msg="Delete endpoint request" containerID=a5a93d57e6 endpointID=1574 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-bqt8j subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=72290c41-619e-4e02-8361-89b8c6ceeb9d k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=72290c41-619e-4e02-8361-89b8c6ceeb9d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a5a93d57e6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1574 identity=25288 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-rabbit-init-bqt8j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 47d8f17b-0f77-4a1d-8a8c-5b20fe395298 default }" containerID=0581b7d0c1546a495e0fd6ee1e30a506488514e6fab6508d0cd05d4583739fa2 datapathConfiguration="&{false false false false false }" interface=lxcde651dd15ed0 k8sPodName=openstack/barbican-ks-service-5tvrf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0581b7d0c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-5tvrf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0581b7d0c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=70e34f45-5e2d-4aca-8497-c473927210da,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=70e34f45-5e2d-4aca-8497-c473927210da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-5tvrf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=70e34f45-5e2d-4aca-8497-c473927210da;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=70e34f45-5e2d-4aca-8497-c473927210da;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0581b7d0c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 identity=58928 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=70e34f45-5e2d-4aca-8497-c473927210da,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=70e34f45-5e2d-4aca-8497-c473927210da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-5tvrf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0581b7d0c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 identity=58928 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-5tvrf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0581b7d0c1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2133 identity=58928 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-5tvrf subsys=endpoint level=info msg="Successful endpoint creation" containerID=0581b7d0c1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2133 identity=58928 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-5tvrf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0581b7d0c1 endpointID=2133 k8sNamespace=openstack k8sPodName=barbican-ks-service-5tvrf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=70e34f45-5e2d-4aca-8497-c473927210da k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=70e34f45-5e2d-4aca-8497-c473927210da k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0581b7d0c1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2133 identity=58928 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/barbican-ks-service-5tvrf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 36f2394d-f3c0-4e96-bc12-95210980ba16 default }" containerID=d144a78b91b53d6f3e2d4cdb7cba4565d3723f99a22de8067726a18288e51a53 datapathConfiguration="&{false false false false false }" interface=lxc52bf79b4c666 k8sPodName=openstack/barbican-ks-endpoints-kn2r4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d144a78b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-kn2r4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d144a78b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=77bed243-a329-4648-95d6-43e923ff9cec,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=77bed243-a329-4648-95d6-43e923ff9cec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-kn2r4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d144a78b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-kn2r4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=77bed243-a329-4648-95d6-43e923ff9cec;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=77bed243-a329-4648-95d6-43e923ff9cec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d144a78b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identity=36203 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=77bed243-a329-4648-95d6-43e923ff9cec,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=77bed243-a329-4648-95d6-43e923ff9cec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-kn2r4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d144a78b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identity=36203 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-kn2r4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d144a78b91 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=491 identity=36203 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-kn2r4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d144a78b91 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=491 identity=36203 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-kn2r4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03622154287337508 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=d144a78b91 endpointID=491 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-kn2r4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=77bed243-a329-4648-95d6-43e923ff9cec k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=77bed243-a329-4648-95d6-43e923ff9cec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d144a78b91 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=491 identity=36203 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-kn2r4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 b84a368a-7ed5-4074-b760-ec253dc3952b default }" containerID=a98af6484dd35765f6380e6a8832b6f96abb8475a44e41d52ec07629cb9d2088 datapathConfiguration="&{false false false false false }" interface=lxc2c8fec7cf4bb k8sPodName=openstack/barbican-ks-user-c4885 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a98af6484d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3140 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-user-c4885 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a98af6484d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3140 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=594047fd-6f06-4eed-95e1-95108060348c,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=594047fd-6f06-4eed-95e1-95108060348c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-user-c4885 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=594047fd-6f06-4eed-95e1-95108060348c;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=594047fd-6f06-4eed-95e1-95108060348c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a98af6484d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3140 identity=740 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=594047fd-6f06-4eed-95e1-95108060348c,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=594047fd-6f06-4eed-95e1-95108060348c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-user-c4885 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a98af6484d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3140 identity=740 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-user-c4885 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a98af6484d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3140 identity=740 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-user-c4885 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a98af6484d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3140 identity=740 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-user-c4885 subsys=daemon level=info msg="Delete endpoint request" containerID=a98af6484d endpointID=3140 k8sNamespace=openstack k8sPodName=barbican-ks-user-c4885 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=594047fd-6f06-4eed-95e1-95108060348c k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=594047fd-6f06-4eed-95e1-95108060348c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a98af6484d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3140 identity=740 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-user-c4885 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.81 8036a1a7-707d-443b-b9ee-58be6578d257 default }" containerID=750b5c7a67de4d8a22c37ee037b67b3a4f0ae83f182b071e8be36524f1bc7c1f datapathConfiguration="&{false false false false false }" interface=lxc0fd8b14ebdcb k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-gvdd6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=750b5c7a67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 ipv4=10.0.0.81 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-gvdd6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=750b5c7a67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.81 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-gvdd6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=750b5c7a67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.81 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-gvdd6 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=750b5c7a67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identity=27030 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.81 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-gvdd6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=750b5c7a67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identity=27030 ipv4=10.0.0.81 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-gvdd6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=750b5c7a67 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1337 identity=27030 ipv4=10.0.0.81 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-gvdd6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=750b5c7a67 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1337 identity=27030 ipv4=10.0.0.81 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-gvdd6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.220 76d16692-11db-4253-b2d1-96cd1f527b2b default }" containerID=1403d3c43de1bbab5db5905d275a47df8e822cb2329d5e1151bd65277da4431e datapathConfiguration="&{false false false false false }" interface=lxcb6086103fa4d k8sPodName=openstack/rook-ceph-detect-version-qfghx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1403d3c43d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=143 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qfghx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1403d3c43d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=143 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=04ff64a7-9f01-4622-9c63-db10cc866031,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=04ff64a7-9f01-4622-9c63-db10cc866031,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qfghx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=04ff64a7-9f01-4622-9c63-db10cc866031;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=04ff64a7-9f01-4622-9c63-db10cc866031;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1403d3c43d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=143 identity=3155 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=04ff64a7-9f01-4622-9c63-db10cc866031,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=04ff64a7-9f01-4622-9c63-db10cc866031,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qfghx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1403d3c43d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=143 identity=3155 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qfghx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1403d3c43d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=143 identity=3155 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qfghx subsys=endpoint level=info msg="Successful endpoint creation" containerID=1403d3c43d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=143 identity=3155 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qfghx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1403d3c43d endpointID=143 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-qfghx subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=04ff64a7-9f01-4622-9c63-db10cc866031 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=04ff64a7-9f01-4622-9c63-db10cc866031 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=1403d3c43d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=143 identity=3155 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qfghx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 7873bfac-b15a-42ca-a2ad-f75afb03c77b default }" containerID=d9544b457fa68e220515b23eb6e03653852899d542583a52eed13cd6d3fac6b6 datapathConfiguration="&{false false false false false }" interface=lxc8b2b0760d7ca k8sPodName=local-path-storage/helper-pod-create-pvc-0c968eec-3a37-4fc1-8453-cac448215cfd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9544b457f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3109 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c968eec-3a37-4fc1-8453-cac448215cfd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9544b457f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3109 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c968eec-3a37-4fc1-8453-cac448215cfd subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9544b457f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3109 identity=10322 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c968eec-3a37-4fc1-8453-cac448215cfd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9544b457f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3109 identity=10322 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c968eec-3a37-4fc1-8453-cac448215cfd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d9544b457f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3109 identity=10322 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c968eec-3a37-4fc1-8453-cac448215cfd subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9544b457f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3109 identity=10322 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c968eec-3a37-4fc1-8453-cac448215cfd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.139 5866843d-e70f-448e-aaeb-6e78e4dec64d default }" containerID=b5bef9e03b285c7e7406a215ab6ab247df5c111bced7f171244e541f85bcc5a7 datapathConfiguration="&{false false false false false }" interface=lxcbd360596d38b k8sPodName=openstack/ceph-object-controller-detect-version-pj8wk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5bef9e03b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2805 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pj8wk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5bef9e03b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2805 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=954ae88d-a9e1-4d15-a41a-6b151cede3be,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=954ae88d-a9e1-4d15-a41a-6b151cede3be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pj8wk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b5bef9e03b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2805 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.139 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pj8wk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=954ae88d-a9e1-4d15-a41a-6b151cede3be;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=954ae88d-a9e1-4d15-a41a-6b151cede3be;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5bef9e03b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2805 identity=9727 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=954ae88d-a9e1-4d15-a41a-6b151cede3be,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=954ae88d-a9e1-4d15-a41a-6b151cede3be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pj8wk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5bef9e03b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2805 identity=9727 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pj8wk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5bef9e03b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2805 identity=9727 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pj8wk subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5bef9e03b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2805 identity=9727 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pj8wk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d9544b457f endpointID=3109 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0c968eec-3a37-4fc1-8453-cac448215cfd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d9544b457f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3109 identity=10322 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0c968eec-3a37-4fc1-8453-cac448215cfd subsys=endpoint level=info msg="Delete endpoint request" containerID=b5bef9e03b endpointID=2805 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-pj8wk subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=954ae88d-a9e1-4d15-a41a-6b151cede3be k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=954ae88d-a9e1-4d15-a41a-6b151cede3be k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=b5bef9e03b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2805 identity=9727 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pj8wk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 0258296f-edd5-49ba-9624-17dfea8022a0 default }" containerID=446fa85a3669d6b32348b35e8a462ee8cf3de0a347a5e292e90a9de8ece4c333 datapathConfiguration="&{false false false false false }" interface=lxc80aeacdaa958 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=446fa85a36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2409 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=446fa85a36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2409 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=446fa85a36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2409 identity=15743 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=446fa85a36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2409 identity=15743 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=446fa85a36 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2409 identity=15743 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=446fa85a36 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2409 identity=15743 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.90 8116697b-6dd0-4f64-86ee-fd4a89a925ed default }" containerID=1f96798a925cb16ccb80db68ae87c4b628850821ea252c2eeecaf5cf25e9b773 datapathConfiguration="&{false false false false false }" interface=lxcbf9fdf8288d3 k8sPodName=openstack/glance-db-init-kddfp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f96798a92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-init-kddfp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f96798a92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=96b6a617-c1fa-4577-ad68-39552221695e,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=96b6a617-c1fa-4577-ad68-39552221695e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-init-kddfp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=96b6a617-c1fa-4577-ad68-39552221695e;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=96b6a617-c1fa-4577-ad68-39552221695e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f96798a92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identity=12771 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=96b6a617-c1fa-4577-ad68-39552221695e,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=96b6a617-c1fa-4577-ad68-39552221695e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-init-kddfp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f96798a92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identity=12771 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-init-kddfp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f96798a92 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1108 identity=12771 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-init-kddfp subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f96798a92 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1108 identity=12771 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-init-kddfp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1f96798a92 endpointID=1108 k8sNamespace=openstack k8sPodName=glance-db-init-kddfp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=96b6a617-c1fa-4577-ad68-39552221695e k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=96b6a617-c1fa-4577-ad68-39552221695e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1f96798a92 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1108 identity=12771 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-init-kddfp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 8b21b456-322a-4c6c-a54d-0c37c10be63b default }" containerID=0691e8ca555a89efa35283d36e98797e44dfc020cbbd42a9a6c89323deb3040f datapathConfiguration="&{false false false false false }" interface=lxc796d177ddd1e k8sPodName=openstack/glance-db-sync-42hp9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0691e8ca55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-sync-42hp9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0691e8ca55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=77a6aab1-31a2-4c87-8598-4d698cc25080,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=77a6aab1-31a2-4c87-8598-4d698cc25080,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-sync-42hp9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=77a6aab1-31a2-4c87-8598-4d698cc25080;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=77a6aab1-31a2-4c87-8598-4d698cc25080;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0691e8ca55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identity=32698 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=77a6aab1-31a2-4c87-8598-4d698cc25080,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=77a6aab1-31a2-4c87-8598-4d698cc25080,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-sync-42hp9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0691e8ca55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identity=32698 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-sync-42hp9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0691e8ca55 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=789 identity=32698 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-sync-42hp9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0691e8ca55 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=789 identity=32698 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-sync-42hp9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0691e8ca55 endpointID=789 k8sNamespace=openstack k8sPodName=glance-db-sync-42hp9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=77a6aab1-31a2-4c87-8598-4d698cc25080 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=77a6aab1-31a2-4c87-8598-4d698cc25080 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0691e8ca55 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=789 identity=32698 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-sync-42hp9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 6df30a83-abfa-4ae4-899c-e946dcd98693 default }" containerID=a6f824386d4f2b461514d7c5c94907bd2a9fe10a8eb2ed1b3b01ee423611b253 datapathConfiguration="&{false false false false false }" interface=lxc833a89bfa39a k8sPodName=openstack/glance-rabbit-init-bz9d6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6f824386d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-bz9d6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6f824386d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=27fee58f-bc88-4b06-a364-ffc3ca1d939c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=27fee58f-bc88-4b06-a364-ffc3ca1d939c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-bz9d6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=27fee58f-bc88-4b06-a364-ffc3ca1d939c;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=27fee58f-bc88-4b06-a364-ffc3ca1d939c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6f824386d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 identity=2107 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=27fee58f-bc88-4b06-a364-ffc3ca1d939c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=27fee58f-bc88-4b06-a364-ffc3ca1d939c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-bz9d6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6f824386d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 identity=2107 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-bz9d6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a6f824386d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=544 identity=2107 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-bz9d6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6f824386d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=544 identity=2107 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-bz9d6 subsys=daemon level=info msg="Delete endpoint request" containerID=a6f824386d endpointID=544 k8sNamespace=openstack k8sPodName=glance-rabbit-init-bz9d6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=27fee58f-bc88-4b06-a364-ffc3ca1d939c k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=27fee58f-bc88-4b06-a364-ffc3ca1d939c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a6f824386d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=544 identity=2107 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-bz9d6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 daa46ff7-c169-4177-b6b4-a3ccf1a2d796 default }" containerID=0c09132351fe83c63cd58aeb68a49e185515fc89e50b9368088848f4e72a12db datapathConfiguration="&{false false false false false }" interface=lxc706d9db22f8a k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-qkcdr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c09132351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1231 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-qkcdr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c09132351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1231 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-qkcdr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c09132351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1231 identity=7473 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-qkcdr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c09132351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1231 identity=7473 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-qkcdr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.24 b230f613-5e09-4a72-ae1f-3b8618762d0f default }" containerID=841af2094f50db03b508e31663ef6410901d4eba175f45877b1dec4da34535d8 datapathConfiguration="&{false false false false false }" interface=lxce8d9cb3dc885 k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-ml6g5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=841af2094f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1551 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-ml6g5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=841af2094f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1551 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-ml6g5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=841af2094f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1551 identity=43374 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-ml6g5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=841af2094f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1551 identity=43374 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-ml6g5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c09132351 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1231 identity=7473 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-qkcdr subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c09132351 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1231 identity=7473 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-qkcdr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=841af2094f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1551 identity=43374 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-ml6g5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=841af2094f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1551 identity=43374 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-ml6g5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 82e10c35-fe8e-4d03-8f76-2b1e605dc1e7 default }" containerID=d81a5063cd41c4526125762203f180bfa5282151be162c9ebcad53246d3dcc92 datapathConfiguration="&{false false false false false }" interface=lxce1948d5dc510 k8sPodName=openstack/glance-ks-service-6m5s8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d81a5063cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1955 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-service-6m5s8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d81a5063cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1955 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cd6b87e6-211d-4606-9179-771c5eb78f4d,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=cd6b87e6-211d-4606-9179-771c5eb78f4d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-service-6m5s8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cd6b87e6-211d-4606-9179-771c5eb78f4d;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=cd6b87e6-211d-4606-9179-771c5eb78f4d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d81a5063cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1955 identity=17097 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cd6b87e6-211d-4606-9179-771c5eb78f4d,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=cd6b87e6-211d-4606-9179-771c5eb78f4d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-service-6m5s8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d81a5063cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1955 identity=17097 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-service-6m5s8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d81a5063cd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1955 identity=17097 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-service-6m5s8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d81a5063cd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1955 identity=17097 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-service-6m5s8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d81a5063cd endpointID=1955 k8sNamespace=openstack k8sPodName=glance-ks-service-6m5s8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cd6b87e6-211d-4606-9179-771c5eb78f4d k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=cd6b87e6-211d-4606-9179-771c5eb78f4d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d81a5063cd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1955 identity=17097 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-service-6m5s8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 3548f4bc-3351-441c-bcff-39148c405bd2 default }" containerID=3b27722e3f6e3fc81f5c5b59113f91fea889f1623ae32fb3939f22ec1ad63927 datapathConfiguration="&{false false false false false }" interface=lxc94a081291b03 k8sPodName=openstack/glance-ks-endpoints-wgg6n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b27722e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-wgg6n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b27722e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3affa7c3-06fe-4edb-97d1-ff580d4cd04a,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3affa7c3-06fe-4edb-97d1-ff580d4cd04a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-wgg6n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3affa7c3-06fe-4edb-97d1-ff580d4cd04a;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3affa7c3-06fe-4edb-97d1-ff580d4cd04a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b27722e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identity=44521 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3affa7c3-06fe-4edb-97d1-ff580d4cd04a,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3affa7c3-06fe-4edb-97d1-ff580d4cd04a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-wgg6n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b27722e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identity=44521 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-wgg6n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3b27722e3f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=587 identity=44521 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-wgg6n subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b27722e3f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=587 identity=44521 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-wgg6n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.25 c7a2b2e6-3b63-472a-b490-cdd56401689a default }" containerID=6fe28f856b7bae79e17258c4496940b11fcb97e14567ae3500f5a8ef0ab319ef datapathConfiguration="&{false false false false false }" interface=lxcf471ad2d27ad k8sPodName=openstack/ceph-object-controller-detect-version-fcssz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fe28f856b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3860 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fcssz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fe28f856b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3860 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=01cc8910-0ea6-4cf8-ab1f-e5db7379a55c,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=01cc8910-0ea6-4cf8-ab1f-e5db7379a55c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fcssz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=01cc8910-0ea6-4cf8-ab1f-e5db7379a55c;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=01cc8910-0ea6-4cf8-ab1f-e5db7379a55c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fe28f856b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3860 identity=27116 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=01cc8910-0ea6-4cf8-ab1f-e5db7379a55c,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=01cc8910-0ea6-4cf8-ab1f-e5db7379a55c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fcssz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fe28f856b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3860 identity=27116 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fcssz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6fe28f856b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3860 identity=27116 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fcssz subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fe28f856b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3860 identity=27116 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fcssz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3b27722e3f endpointID=587 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-wgg6n subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3affa7c3-06fe-4edb-97d1-ff580d4cd04a k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3affa7c3-06fe-4edb-97d1-ff580d4cd04a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3b27722e3f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=587 identity=44521 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-wgg6n subsys=endpoint level=info msg="Delete endpoint request" containerID=6fe28f856b endpointID=3860 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-fcssz subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=01cc8910-0ea6-4cf8-ab1f-e5db7379a55c k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=01cc8910-0ea6-4cf8-ab1f-e5db7379a55c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=6fe28f856b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3860 identity=27116 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-fcssz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 b3ddea19-5e5a-48ae-9acf-c985c3a7b3ee default }" containerID=13ba7b23f463f41e37e0842a2931570206f598dc9f15f1db5aba6703f20c981e datapathConfiguration="&{false false false false false }" interface=lxc71a777d73a8e k8sPodName=openstack/glance-ks-user-h6v5l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13ba7b23f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1975 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-ks-user-h6v5l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13ba7b23f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1975 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7bfcf1e4-b076-486b-a54b-f59def1293d8,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=7bfcf1e4-b076-486b-a54b-f59def1293d8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-ks-user-h6v5l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=13ba7b23f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1975 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-ks-user-h6v5l line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7bfcf1e4-b076-486b-a54b-f59def1293d8;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=7bfcf1e4-b076-486b-a54b-f59def1293d8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13ba7b23f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1975 identity=49987 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7bfcf1e4-b076-486b-a54b-f59def1293d8,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=7bfcf1e4-b076-486b-a54b-f59def1293d8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-ks-user-h6v5l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13ba7b23f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1975 identity=49987 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-ks-user-h6v5l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=13ba7b23f4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1975 identity=49987 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-ks-user-h6v5l subsys=endpoint level=info msg="Successful endpoint creation" containerID=13ba7b23f4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1975 identity=49987 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-ks-user-h6v5l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=13ba7b23f4 endpointID=1975 k8sNamespace=openstack k8sPodName=glance-ks-user-h6v5l subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7bfcf1e4-b076-486b-a54b-f59def1293d8 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=7bfcf1e4-b076-486b-a54b-f59def1293d8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=13ba7b23f4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1975 identity=49987 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-ks-user-h6v5l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 d5d07661-1d63-4359-8bea-12345ae11e0d default }" containerID=d83d593f51af39680c6e8666d3ed6c43f6104aa7d360f0a35486014ddf907679 datapathConfiguration="&{false false false false false }" interface=lxc5f109459cea8 k8sPodName=openstack/glance-metadefs-load-mf8gj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d83d593f51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2390 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-metadefs-load-mf8gj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d83d593f51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2390 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4a04df07-88a8-40f7-954f-7bf5690cba4a,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=4a04df07-88a8-40f7-954f-7bf5690cba4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-metadefs-load-mf8gj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d83d593f51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2390 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-metadefs-load-mf8gj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4a04df07-88a8-40f7-954f-7bf5690cba4a;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=4a04df07-88a8-40f7-954f-7bf5690cba4a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d83d593f51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2390 identity=59050 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4a04df07-88a8-40f7-954f-7bf5690cba4a,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=4a04df07-88a8-40f7-954f-7bf5690cba4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-metadefs-load-mf8gj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d83d593f51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2390 identity=59050 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-metadefs-load-mf8gj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d83d593f51 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2390 identity=59050 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-metadefs-load-mf8gj subsys=endpoint level=info msg="Successful endpoint creation" containerID=d83d593f51 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2390 identity=59050 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-metadefs-load-mf8gj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d83d593f51 endpointID=2390 k8sNamespace=openstack k8sPodName=glance-metadefs-load-mf8gj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4a04df07-88a8-40f7-954f-7bf5690cba4a k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=4a04df07-88a8-40f7-954f-7bf5690cba4a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d83d593f51 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2390 identity=59050 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-metadefs-load-mf8gj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 cccd8c55-122c-4a75-bd03-1d942d76ec1d default }" containerID=709f09913e936a327d748b360335d126184ea04b1cb211eec76418dc2c61a1ed datapathConfiguration="&{false false false false false }" interface=lxc4970f8c56b4e k8sPodName=openstack/glance-storage-init-6gckz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=709f09913e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-storage-init-6gckz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=709f09913e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5d430f3c-c764-414a-88b1-a06c6304c15e,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=5d430f3c-c764-414a-88b1-a06c6304c15e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-storage-init-6gckz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5d430f3c-c764-414a-88b1-a06c6304c15e;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=5d430f3c-c764-414a-88b1-a06c6304c15e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=709f09913e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-storage-init-6gckz line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=709f09913e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identity=33909 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5d430f3c-c764-414a-88b1-a06c6304c15e,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=5d430f3c-c764-414a-88b1-a06c6304c15e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-storage-init-6gckz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=709f09913e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identity=33909 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-storage-init-6gckz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=709f09913e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=641 identity=33909 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-storage-init-6gckz subsys=endpoint level=info msg="Successful endpoint creation" containerID=709f09913e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=641 identity=33909 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-storage-init-6gckz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=709f09913e endpointID=641 k8sNamespace=openstack k8sPodName=glance-storage-init-6gckz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5d430f3c-c764-414a-88b1-a06c6304c15e k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=5d430f3c-c764-414a-88b1-a06c6304c15e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=709f09913e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=641 identity=33909 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-storage-init-6gckz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 f188746d-de81-4470-8947-479bd3bc990d default }" containerID=8a78eb7e8802b8e3566a426a595ac5f965244a5ff81f8222e44cba6f29b7c2d0 datapathConfiguration="&{false false false false false }" interface=lxce5a9d72e32c0 k8sPodName=openstack/glance-api-6c497d5d78-br29q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a78eb7e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-api-6c497d5d78-br29q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a78eb7e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-api-6c497d5d78-br29q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a78eb7e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identity=35437 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-api-6c497d5d78-br29q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a78eb7e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identity=35437 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-api-6c497d5d78-br29q subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8a78eb7e88 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=56 identity=35437 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-api-6c497d5d78-br29q subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a78eb7e88 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=56 identity=35437 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-api-6c497d5d78-br29q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.78 663abf26-bcd1-407b-a8f6-e86099b3a885 default }" containerID=4fb4758aed86ef2533106535ed9694302894806868532255466e58bc8aa2a1bf datapathConfiguration="&{false false false false false }" interface=lxc01bb062747e9 k8sPodName=openstack/staffeln-api-6545bb8c99-jtz7t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fb4758aed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-api-6545bb8c99-jtz7t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fb4758aed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-api-6545bb8c99-jtz7t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fb4758aed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=43850 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-api-6545bb8c99-jtz7t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4fb4758aed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=43850 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-api-6545bb8c99-jtz7t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.204 47db7414-6c6a-4e0c-8265-45cc5197342b default }" containerID=81c20e48884252aeac220b90c8604d888fdfb16e112767d42e865ae3c01a1670 datapathConfiguration="&{false false false false false }" interface=lxc539480af0d32 k8sPodName=openstack/staffeln-conductor-99c557cb8-7jt5g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81c20e4888 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/staffeln-conductor-99c557cb8-7jt5g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81c20e4888 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/staffeln-conductor-99c557cb8-7jt5g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81c20e4888 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identity=29561 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/staffeln-conductor-99c557cb8-7jt5g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81c20e4888 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identity=29561 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/staffeln-conductor-99c557cb8-7jt5g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 90cbd229-48ff-40d1-a48b-17ae5c117f59 default }" containerID=b8c0168a0326f49fd9ce833e319997286685a64b793d3b22abeda1c1666dc265 datapathConfiguration="&{false false false false false }" interface=lxc604f33dda6b1 k8sPodName=openstack/staffeln-db-init-746sm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8c0168a03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/staffeln-db-init-746sm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8c0168a03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=825b36fa-2203-4b1b-9f6b-52c25f584997,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=825b36fa-2203-4b1b-9f6b-52c25f584997,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/staffeln-db-init-746sm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=825b36fa-2203-4b1b-9f6b-52c25f584997;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=825b36fa-2203-4b1b-9f6b-52c25f584997;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8c0168a03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identity=54511 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=825b36fa-2203-4b1b-9f6b-52c25f584997,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=825b36fa-2203-4b1b-9f6b-52c25f584997,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/staffeln-db-init-746sm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8c0168a03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identity=54511 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/staffeln-db-init-746sm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4fb4758aed datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=743 identity=43850 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-api-6545bb8c99-jtz7t subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fb4758aed datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=743 identity=43850 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/staffeln-api-6545bb8c99-jtz7t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=81c20e4888 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=491 identity=29561 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/staffeln-conductor-99c557cb8-7jt5g subsys=endpoint level=info msg="Successful endpoint creation" containerID=81c20e4888 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=491 identity=29561 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/staffeln-conductor-99c557cb8-7jt5g subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b8c0168a03 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=153 identity=54511 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/staffeln-db-init-746sm subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8c0168a03 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=153 identity=54511 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/staffeln-db-init-746sm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b8c0168a03 endpointID=153 k8sNamespace=openstack k8sPodName=staffeln-db-init-746sm subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=825b36fa-2203-4b1b-9f6b-52c25f584997 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=825b36fa-2203-4b1b-9f6b-52c25f584997 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=b8c0168a03 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=153 identity=54511 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/staffeln-db-init-746sm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 5b6bac74-b529-4321-9442-a0c99f45b210 default }" containerID=b594c9698bbb09756650b311b60f0aab298be410fa8f9a9cc6dd8643fa3e7120 datapathConfiguration="&{false false false false false }" interface=lxcbf5b91202ecb k8sPodName=openstack/staffeln-db-sync-d9r6h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b594c9698b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/staffeln-db-sync-d9r6h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b594c9698b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=59058195-fbb1-42a3-8df3-d75b52dd7586,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=59058195-fbb1-42a3-8df3-d75b52dd7586,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/staffeln-db-sync-d9r6h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=59058195-fbb1-42a3-8df3-d75b52dd7586;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=59058195-fbb1-42a3-8df3-d75b52dd7586;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b594c9698b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=44417 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=59058195-fbb1-42a3-8df3-d75b52dd7586,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=59058195-fbb1-42a3-8df3-d75b52dd7586,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/staffeln-db-sync-d9r6h oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b594c9698b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=44417 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/staffeln-db-sync-d9r6h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b594c9698b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=82 identity=44417 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/staffeln-db-sync-d9r6h subsys=endpoint level=info msg="Successful endpoint creation" containerID=b594c9698b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=82 identity=44417 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/staffeln-db-sync-d9r6h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager